LSA Protection

Enable LSA protection. For more information, see http://technet.microsoft.com/en-us/library/dn408187.aspx

Supported on: At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSYSTEM\CurrentControlSet\Control\Lsa
Value NameRunAsPPL
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

pth.admx

Administrative Templates (Computers)