Microsoft Security Events Component Minifilter - Windows 11 Service
Microsoft Security Events Component File System Filter Driver.
This service also exists in Windows 10.
Startup Type
| Windows 11 version | Home | Pro | Education | Enterprise |
|---|---|---|---|---|
| 21H2 | not exists | Boot | Boot | Boot |
| 22H2 | not exists | Boot | Boot | Boot |
| 23H2 | not exists | Manual | Manual | Manual |
| 24H2 | not exists | Manual | Manual | Manual |
Default Properties
| Display name: | Microsoft Security Events Component Minifilter |
| Service name: | MsSecFlt |
| Type: | kernel |
| Path: | %WinDir%\system32\drivers\mssecflt.sys |
| Error control: | normal |
| Group: | Filter |
Default Behavior
The Microsoft Security Events Component Minifilter service is a kernel mode driver. If Microsoft Security Events Component Minifilter fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the MsSecFlt service has failed to start.
Dependencies
Microsoft Security Events Component Minifilter is unable to start, if the FltMgr service is stopped or disabled.
Restore Default Startup Type for Microsoft Security Events Component Minifilter
Automated Restore
1. Select your Windows 11 edition and release, and then click on the Download button below.
2. Save the RestoreMicrosoftSecurityEventsComponentMinifilterWindows11.bat file to any folder on a local drive such as SSD or a hard disk.
3. Right-click the downloaded batch file and select Properties.
4. Check the Unblock checkbox and click OK.
5. Right-click the batch file again and select Run as administrator.
6. Restart the computer to save changes.
Note. Make sure that the mssecflt.sys file exists in the %WinDir%\system32\drivers folder. If this file is missing you can try to restore it from your Windows 11 installation media.