System Guard Runtime Monitor Agent - Windows 11 Service
System Guard Runtime Monitor Agent Driver.
This service exists in Windows 11 only.
Startup Type
System Guard Runtime Monitor Agent is a kernel driver, therefore its startup must be configured depending on installed hardware. Changing its startup configuration might cause unexpected hardware issues. In the table below you can see how it is configured on my system, but your default settings might differ from mine.
| Windows 11 version | Home | Pro | Education | Enterprise |
|---|---|---|---|---|
| 21H2 | Boot | Boot | Boot | Boot |
| 22H2 | Boot | Boot | Boot | Boot |
| 23H2 | Disabled | Disabled | Disabled | Disabled |
| 24H2 | Disabled | Disabled | Disabled | Disabled |
Default Properties
| Display name: | System Guard Runtime Monitor Agent |
| Service name: | SgrmAgent |
| Type: | kernel |
| Path: | %WinDir%\system32\drivers\SgrmAgent.sys |
| Error control: | normal |
Default Behavior
The System Guard Runtime Monitor Agent service is a kernel mode driver. If System Guard Runtime Monitor Agent fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the SgrmAgent service has failed to start.
Restore Default Startup Type for System Guard Runtime Monitor Agent
Automated Restore
1. Select your Windows 11 edition and release, and then click on the Download button below.
2. Save the RestoreSystemGuardRuntimeMonitorAgentWindows11.bat file to any folder on a local drive such as SSD or a hard disk.
3. Right-click the downloaded batch file and select Properties.
4. Check the Unblock checkbox and click OK.
5. Right-click the batch file again and select Run as administrator.
6. Restart the computer to save changes.
Note. Make sure that the SgrmAgent.sys file exists in the %WinDir%\system32\drivers folder. If this file is missing you can try to restore it from your Windows 11 installation media.