ASR Rule issue

Question

Hi,&nbsp;We have enabled ASR rules using SCCM but 'block credential stealing from the windows local security authority subsystem (lsass.exe)' shows as not applicable. Any ideas why?&nbsp;&nbsp;&nbsp;ThanksPhil&nbsp;

billclarksonantill · Answer

What version of Windows are you using, not all versions of windows OS are compatible

plivingston11 · Answer

Hi Bill,We are using 22h2, fully patched.

Forum Discussion

ASR Rule issue