batcmd.com Windows 11 Services

IPsec Policy Agent - Windows 11 Service

Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec". If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Defender Firewall is not available when this service is stopped.

This service also exists in Windows 10, 7, 8, Vista and XP.

Startup Type

Windows 11 version Home Pro Education Enterprise
21H2 Manual Manual Manual Manual
22H2 Manual Manual Manual Manual
23H2 Manual Manual Manual Manual

Default Properties

Display name:IPsec Policy Agent
Service name:PolicyAgent
Type:share
Path:%WinDir%\system32\svchost.exe -k NetworkServiceNetworkRestricted -p
File:%WinDir%\System32\ipsecsvc.dll
Error control:normal
Object:NT Authority\NetworkService
Privileges:
  • SeAuditPrivilege
  • SeChangeNotifyPrivilege
  • SeCreateGlobalPrivilege
  • SeImpersonatePrivilege

Default Behavior

The IPsec Policy Agent service is running as NT Authority\NetworkService in a shared process of svchost.exe. Other services might run in the same process. If IPsec Policy Agent fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the PolicyAgent service has failed to start.

Dependencies

IPsec Policy Agent is unable to start, if at least one of the following services is stopped or disabled:

Restore Default Startup Type for IPsec Policy Agent

Automated Restore

1. Select your Windows 11 edition and release, and then click on the Download button below.

2. Save the RestoreIPsecPolicyAgentWindows11.bat file to any folder on a local drive such as SSD or a hard disk.

3. Right-click the downloaded batch file and select Properties.

4. Check the Unblock checkbox and click OK.

5. Right-click the batch file again and select Run as administrator.

6. Restart the computer to save changes.

Note. Make sure that the ipsecsvc.dll file exists in the %WinDir%\System32 folder. If this file is missing you can try to restore it from your Windows 11 installation media.

Yea, though I walk through the valley of the shadow of death, I will fear no evil: for thou art with me; thy rod and thy staff they comfort me.