Local Security Authority Protection in W11 activated or not?

I installed a fresh new PC with w11 Pro.
And I installed my usual plugins and utilities.
But the InMusic Software Center, using Apple Bonjour, generates lot of popups :
”This module is blocked from loading into the Local Security Authority
\Device….\Bonjour\mdnsNSP.dll “

It appears that the protection on the LSA is activated on this new PC where it wasn’t on my older one.
I tried to uninstall Bonjour but InMusic Software Center stops working.
Unchecking the LSA Protection in setting is not recommanded by MS.
Apple should fix it but it is Apple and MS…
What have you done, kept the protection or removed it ?

1 Like

I remember seeing this a fair bit early after having built my new Windows 11 PC. It wasn’t from the same product, as I didn’t install that, but I don’t recall what it was from. I initially did try some workarounds for the message that may have uninstalled the support library in question, but I think I ultimately had it come back, and, if I remember correctly, when it popped up again, I just checked the box that said not to display that message anymore. Haven’t seen it in months now.

1 Like

I do wish these companies would use our built-in Windows mDNS instead of relying on a very old Apple product.

Looks like you can get a newer version of Bonjour via iTunes download:
https://www.elevenforum.com/t/this-module-is-blocked-from-loading-into-the-local-security-authority-device-harddiskvolume-program-files-bonjour-mdnsnsp-dll.34191/post-573160

Pete
Microsoft

3 Likes

I have the InMusic Software Centre installed here and I have never seen this message. I have not touched the Local Security Authority settings on my machine so it’s at the default, whatever that is.

Do you have iTunes/Apple Music installed? If so, you may have a newer version of Bonjour. Or perhaps some other app installed it.

Pete
Microsoft

1 Like

iTunes / Apple Music would only get near my audio machines over my dead body.

Bonjour is on both my audio machines but I’m never actually sure how it gets there.

Pace/iLok uses it, I know that much, because every time I install an update for iLok, Bonjour appears. I just uninstall it and delete all the leftovers manually.

1 Like

Well that would explain it. I have iLok on both machines. I don’t delete Bonjour just in case there’s something I’m not aware of that depends on it.

1 Like

My understanding is that it is some kind of networking utility. Since I don’t use my PC on a network, I’ve never had any issues.


EG

1 Like

Bonjour is part of any Dante related install, is used for many other network related drivers and software. It configures the network as needed if there is no dhcp and dns services are available.
It is an alternative to zeroconf on Mac and Win.

The Local Security Authority feature is relative new, it was introduced with Win11 25H2 and a later feature update. Or at least the warning is new.

1 Like

I have lsa turned on, memory integrity turned off. I don’t remember why I set it that way, but that’s the way it is. uac is completely disabled as well (diff topic). To my knowledge there is nothing on my win 11 computers with the name bonjour (a system search doesn’t show anything….not even as part of my ilok acct/dongle…although I’ve heard the name over the centuries).

1 Like

Bonjour is not related to ilok.

Bonjour is also used by VEP.

Pete
Microsoft

1 Like

I’ve just updated iLok from 5.10.2 to 5.10.4 and Bonjour has re-appeared in the C:\Program Files and C:\Program Files (x86) folders.

1 Like

VEP 8 doesn´t require bonjour

From website

Improved reliability of server discovery (no longer dependent on Bonjour)

2 Likes

Nice!

Pete
Microsoft

iLok can be run as a shared service in a LAN environment accessed by multiple machines, so I imagine that”s where Bonjour applies.

1 Like

Indeed, which why I have no issues when removing it - I don’t have a LAN.
As Pete said above, why not use the built-in system?

Bonjour just got popular first, and is usable across Windows and MacOS platforms.

Thanks for this answer but I exactly did this and nowdays, there is no more the bonjour setup in the ziped file, Apple has replaced it but dozens of files and I found no way to to use it without polluing my w11 farther than it needs.

But I do not need iTunes. :frowning:

But I need iLok and inMusic ( this last is not an absolute need but requested in case of update)
I must add that Copilot proposed to go in registry to fix it, but I don’t like to go and begin updating registry on a new PC (!!!)

The problematic provider is located here:
Code
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\OSConfig
The value to delete is usually:


“mDNSResponder” (or sometimes “Bonjour”)
And sometimes also in:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
The offending value is in Security Packages or Notification Packages.

As we said:
Never delete the entire LSA key, only the entry added by Bonjour.

Verify that the other values ​​are their defaults:
msv1_0, kerberos, tspkg, wdigest, scecli, cng, etc.

:hammer_and_wrench: Clean and safe procedure
Open regedit.

Go to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\OSConfig

Look for an entry related to Bonjour or mDNSResponder.

Delete only this entry.

Also check:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

Restart.

After that, the LSA pop-ups will disappear permanently.