batcmd.com Windows 7 Services

Encrypting File System (EFS) - Windows 7 Service

Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.

This service also exists in Windows 10 and 8.

Startup Type

Windows 7 edition without SP SP1
Starter Manual Manual
Home Basic Manual Manual
Home Premium Manual Manual
Professional Manual Manual
Ultimate Manual Manual
Enterprise Manual Manual

Default Properties

Display name:Encrypting File System (EFS)
Service name:EFS
Type:share
Path:%WinDir%\System32\lsass.exe
Error control:normal
Object:LocalSystem
Privileges:
  • SeImpersonatePrivilege
  • SeTcbPrivilege
  • SeIncreaseQuotaPrivilege
  • SeAssignPrimaryTokenPrivilege
  • SeAuditPrivilege

Default Behavior

The Encrypting File System (EFS) service runs as LocalSystem in a shared process. It shares an executable file with other services. If the Encrypting File System (EFS) fails to load or initialize, the error is recorded into the Event Log. Windows 7 startup should proceed, but a message box is displayed informing you that the EFS service has failed to start.

Dependencies

Encrypting File System (EFS) will not start, if the Remote Procedure Call (RPC) service is stopped or disabled.

Restore Default Startup Type for Encrypting File System (EFS)

Automated Restore

1. Select your Windows 7 edition and Service Pack, and then click on the Download button below.

2. Save the RestoreEncryptingFileSystemEFSWindows7.bat file to any folder on your hard drive.

3. Right-click the downloaded batch file and select Run as administrator.

4. Restart the computer to save changes.

Note. Make sure that the lsass.exe file exists in the %WinDir%\System32 folder. If this file is missing you can try to restore it from your Windows 7 installation media.