Microsoft Defender Core Service - Windows 11 Service
Monitors the availability, health, and performance of various security components.
This service exists in Windows 11 only.
Startup Type
| Windows 11 version | Home | Pro | Education | Enterprise |
|---|---|---|---|---|
| 21H2 | not exists | not exists | not exists | not exists |
| 22H2 | not exists | not exists | not exists | not exists |
| 23H2 | not exists | not exists | not exists | not exists |
| 24H2 | not exists | not exists | not exists | not exists |
| 25H2 | not exists | not exists | not exists | not exists |
| 26H1 | not exists | not exists | not exists | not exists |
| 26H2 | Automatic | Automatic | Automatic | Automatic |
Default Properties
| Display name: | Microsoft Defender Core Service |
| Service name: | MDCoreSvc |
| Type: | own |
| Path: | %ProgramFiles%\Windows Defender\MpDefenderCoreService.exe |
| Error control: | normal |
| Object: | LocalSystem |
| Privileges: |
|
Default Behavior
The Microsoft Defender Core Service is running as LocalSystem in its own process of MpDefenderCoreService.exe. It doesn't share its process with other services. If Microsoft Defender Core Service fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the MDCoreSvc service has failed to start.
Restore Default Startup Type for Microsoft Defender Core Service
Automated Restore
1. Select your Windows 11 edition, and then click on the Download button below.
2. Save the RestoreMicrosoftDefenderCoreServiceWindows11.bat file to any folder on a local drive such as SSD or a hard disk.
3. Right-click the downloaded batch file and select Properties.
4. Check the Unblock checkbox and click OK.
5. Right-click the batch file again and select Run as administrator.
6. Restart the computer to save changes.
Note. Make sure that the MpDefenderCoreService.exe file exists in the %ProgramFiles%\Windows Defender folder. If this file is missing you can try to restore it from your Windows 11 installation media.