mdnsNSP.dll - This module is blocked from loading into the Local Security Authority

On clean installation of MS Windows 11 Pro. 24H2 with latest iTunes 12.13.4.4 64-bit, after user logs into Windows the following message is displayed by Program Compatibility Assistant:

This module is blocked from loading into the Local Security Authority.
\Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll


Obviously, the DLL belongs to Bonjour component of iTunes.


In Core Isolation settings I see that Local Security Authority protection is enabled.


On https://support.microsoft.com/en-gb/windows/core-isolation-e30ed737-17d8-42f3-a2a9-87521df09b78 I read:

Local Security Authority (LSA) protection is a Windows security feature to help prevent the theft of credentials used for signing into Windows.

The Local Security Authority (LSA) is a crucial process in Windows involved in user authentication. It’s responsible for verifying credentials during the login process and managing authentication tokens and tickets used to enable single sign-on for services. LSA protection helps prevent untrusted software from running inside LSA or from accessing LSA memory.

LSA protection is turned on by default on new installs of Windows 11 version 22H2 and 23H2 on enterprise managed devices. It’s turned on by default on all new installs of Windows 11 version 24H2 and later.


So, mdnsNSP.dll is regarded as an untrusted software regarding LSA.


I hope someone from Apple will listen to it and fix the issue.


-- rpr.

Posted on Dec 2, 2024 01:22 AM

Reply
Question marked as Top-ranking reply

Posted on Dec 27, 2024 05:38 PM

Thank you for the details. I think this is beyond my capabilities (and comprehension). I’ll just keep Bonjour installed and deal with the LSA warnings for now. I can hide the warnings if I get fed up with them.


This issue doesn’t seem to be impacting iTunes usability and that’s better than the Windows Store version that bricks devices during iOS updates and doesn’t allow you to restore. I’m so frustrated with this whole deal and the many hours I’ve spent and lost on this issue.

Similar questions

27 replies
Question marked as Top-ranking reply

Dec 27, 2024 05:38 PM in response to turingtest2

Thank you for the details. I think this is beyond my capabilities (and comprehension). I’ll just keep Bonjour installed and deal with the LSA warnings for now. I can hide the warnings if I get fed up with them.


This issue doesn’t seem to be impacting iTunes usability and that’s better than the Windows Store version that bricks devices during iOS updates and doesn’t allow you to restore. I’m so frustrated with this whole deal and the many hours I’ve spent and lost on this issue.

Jan 22, 2025 04:16 AM in response to rpremuz

Also played around with Bonjour as separate installer. The current version is 3.1.0.1 from 2015 (extracted from iTunes installer). Also found: Download Bonjour Print Services for Windows v2.0.2 - Apple Support which gives you an even older version...

Updates to and reinstallation of version 3.1.0.1 do not fix the LSA warning.



My summary: Uninstall Bonjour (if not needed) or hope to get an updated version.

Apr 30, 2025 06:40 PM in response to rpremuz

Perhaps it is past time to say Au Revoir and Bon Débarras to the decrepit Bonjour the ole heave-ho to the bin and join Flash, Java, Silverlight, QuickTime and OSX. Unfortunately, it my HP printer won't scan to my desktop as it did flawlessly in Windows 10 for over 8 years. I have no hope "Apple Cares" to even look at Bonjour, much less pay the $300 sign-up fee to sign the app as it is the newest episode of the "Walking Dead"

Jan 3, 2025 05:49 AM in response to GRBForHim

exact same thing happened to me yesterday, repair shop had to reset to factory, phone fine on 18.2 now but is no longer recognized by itunes (from MS store), works fine on my wifes laptop (with itunes from MS store), havent tried dling form apple direct, but today i get the same popup, wish there was an easy alternative to get audiobooks onto my phone from PC.

Mar 2, 2025 02:27 AM in response to rpremuz

Short summary on this one as problem still exists: Since Local Security Authority (LSA) protection is on per default starting with Windows 11 24H2, this prompt will appear. Bonjour might be installed through iTunes or other third-party software (like Printix that simulates AirPrint). Only fix so far, is an uninstallation (if not needed any more). If needed, there is no solution. Also, Microsoft does not offer policies to define exclusions. Turning of LSA can't be seen as acceptable solution.

In the end, Apple needs to fix their Bonjour DLL. Currently, it is not fulfilling the requirements defined by Microsoft like "digitally signed with a Microsoft signature": Configure added LSA protection | Microsoft Learn

Apr 28, 2025 01:14 AM in response to rpremuz

Same problem here. Bonjour 3.1.0.1 was installed on this Windows 11 machine ~2015, but there seems to be a 2025 update. The DLL is from 2015. However, Bonjour.Resources was changed in 2025.


I think it has to do with the iCloud app/software installed since I removed iTunes etc. a long time ago. I will give it a try and uninstall Bonjour as I have not found any other ways around (exceptions) and hope that iCloud continues to work.


Bottom line: Only Apple can (must) fix this.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

mdnsNSP.dll - This module is blocked from loading into the Local Security Authority

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.