batcmd.com Windows 10 Services

Windows Defender Advanced Threat Protection Service - Windows 10 Service

Windows Defender Advanced Threat Protection service helps protect against advanced threats by monitoring and reporting security events that happen on the computer.

This service also exists in Windows 11.

Startup Type

Windows 10 version Home Pro Education Enterprise
1507 not exists not exists not exists not exists
1511 not exists not exists not exists not exists
1607 not exists Manual Manual Manual
1703 not exists Manual Manual Manual
1709 not exists Manual Manual Manual
1803 not exists Manual Manual Manual
1809 not exists Manual Manual Manual
1903 not exists Manual Manual Manual
1909 not exists Manual Manual Manual
2004 not exists Manual Manual Manual
20H2 not exists Manual Manual Manual
21H1 not exists Manual Manual Manual
21H2 not exists Manual Manual Manual
22H2 not exists Manual Manual Manual

Default Properties

Display name:Windows Defender Advanced Threat Protection Service
Service name:Sense
Type:own
Path:%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe
Error control:normal
Object:LocalSystem
Privileges:
  • SeAuditPrivilege
  • SeChangeNotifyPrivilege
  • SeCreateGlobalPrivilege
  • SeCreatePagefilePrivilege
  • SeCreatePermanentPrivilege
  • SeDebugPrivilege
  • SeImpersonatePrivilege
  • SeIncreaseBasePriorityPrivilege
  • SeLoadDriverPrivilege
  • SeLockMemoryPrivilege
  • SeProfileSingleProcessPrivilege
  • SeTcbPrivilege
  • SeSecurityPrivilege
  • SeRestorePrivilege
  • SeAssignPrimaryTokenPrivilege
  • SeIncreaseQuotaPrivilege
  • SeBackupPrivilege
  • SeCreateSymbolicLinkPrivilege
  • SeDelegateSessionUserImpersonatePrivilege
  • SeIncreaseWorkingSetPrivilege
  • SeManageVolumePrivilege
  • SeShutdownPrivilege
  • SeSystemEnvironmentPrivilege
  • SeSystemProfilePrivilege
  • SeSystemtimePrivilege
  • SeTakeOwnershipPrivilege
  • SeTimeZonePrivilege
  • SeUndockPrivilege

Default Behavior

The Windows Defender Advanced Threat Protection Service is running as LocalSystem in its own process of MsSense.exe. It doesn't share its process with other services. If Windows Defender Advanced Threat Protection Service fails to start, the error is logged. Windows 10 startup proceeds, but a message box is displayed informing you that the Sense service has failed to start.

Restore Default Startup Type of Windows Defender Advanced Threat Protection Service

Automated Restore

1. Select your Windows 10 edition and release, and then click on the Download button below.

2. Save the RestoreWindowsDefenderAdvancedThreatProtectionServiceWindows10.bat file to any folder on your hard drive.

3. Right-click the downloaded batch file and select Run as administrator.

4. Restart the computer to save changes.

Note. Make sure that the MsSense.exe file exists in the %ProgramFiles%\Windows Defender Advanced Threat Protection folder. If this file is missing you can try to restore it from your Windows 10 installation media.

Yea, though I walk through the valley of the shadow of death, I will fear no evil: for thou art with me; thy rod and thy staff they comfort me.