"This module is blocked from loading into the Local Security Authority: [path]\ndtwsock.dll" warning

« Back to Knowledge Base

This warning dialog may appear after Windows starts, most commonly on computers that are part of a business or managed network. It does not indicate a malfunction. The message refers to Windows blocking an attempt to load NetDetour's Name Service Provider (NSP) module into the Local Security Authority (LSA) process due to LSA Protection restrictions. This behavior has no impact on NetDetour's functionality.

The warning occurs because NSPs are deprecated by Microsoft and are restricted by modern Windows security features. To prevent this message from appearing, reinstall NetDetour using the Windows Filtering Platform (WFP) interception mode:

1. Uninstall NetDetour.
2. Reinstall it and select the Use WFP option during installation.