batcmd.com Windows 11 Services

Windows Defender Advanced Threat Protection Service - Windows 11 Service

Windows Defender Advanced Threat Protection service helps protect against advanced threats by monitoring and reporting security events that happen on the computer.

This service also exists in Windows 10.

Startup Type

Windows 11 version Home Pro Education Enterprise
21H2 not exists Manual Manual Manual
22H2 not exists Manual Manual Manual
23H2 not exists Manual Manual Manual
24H2 not exists Manual Manual Manual

Default Properties

Display name:Windows Defender Advanced Threat Protection Service
Service name:Sense
Type:own
Path:%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe
Error control:normal
Object:LocalSystem
Privileges:
  • SeAuditPrivilege
  • SeChangeNotifyPrivilege
  • SeCreateGlobalPrivilege
  • SeCreatePagefilePrivilege
  • SeCreatePermanentPrivilege
  • SeDebugPrivilege
  • SeImpersonatePrivilege
  • SeIncreaseBasePriorityPrivilege
  • SeLoadDriverPrivilege
  • SeLockMemoryPrivilege
  • SeProfileSingleProcessPrivilege
  • SeTcbPrivilege
  • SeSecurityPrivilege
  • SeRestorePrivilege
  • SeAssignPrimaryTokenPrivilege
  • SeIncreaseQuotaPrivilege
  • SeBackupPrivilege
  • SeCreateSymbolicLinkPrivilege
  • SeDelegateSessionUserImpersonatePrivilege
  • SeIncreaseWorkingSetPrivilege
  • SeManageVolumePrivilege
  • SeShutdownPrivilege
  • SeSystemEnvironmentPrivilege
  • SeSystemProfilePrivilege
  • SeSystemtimePrivilege
  • SeTakeOwnershipPrivilege
  • SeTimeZonePrivilege
  • SeUndockPrivilege

Default Behavior

The Windows Defender Advanced Threat Protection Service is running as LocalSystem in its own process of MsSense.exe. It doesn't share its process with other services. If Windows Defender Advanced Threat Protection Service fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the Sense service has failed to start.

Restore Default Startup Type for Windows Defender Advanced Threat Protection Service

Automated Restore

1. Select your Windows 11 edition and release, and then click on the Download button below.

2. Save the RestoreWindowsDefenderAdvancedThreatProtectionServiceWindows11.bat file to any folder on a local drive such as SSD or a hard disk.

3. Right-click the downloaded batch file and select Properties.

4. Check the Unblock checkbox and click OK.

5. Right-click the batch file again and select Run as administrator.

6. Restart the computer to save changes.

Note. Make sure that the MsSense.exe file exists in the %ProgramFiles%\Windows Defender Advanced Threat Protection folder. If this file is missing you can try to restore it from your Windows 11 installation media.

Yea, though I walk through the valley of the shadow of death, I will fear no evil: for thou art with me; thy rod and thy staff they comfort me.