System Guard Runtime Monitor Broker - Windows 11 Service
Monitors and attests to the integrity of the Windows platform.
This service exists in Windows 11 only.
Startup Type
| Windows 11 version | Home | Pro | Education | Enterprise |
|---|---|---|---|---|
| 21H2 | Automatic | Automatic | Automatic | Automatic |
| 22H2 | Automatic | Automatic | Automatic | Automatic |
| 23H2 | Disabled | Disabled | Disabled | Disabled |
| 24H2 | Disabled | Disabled | Disabled | Disabled |
Default Properties
| Display name: | System Guard Runtime Monitor Broker |
| Service name: | SgrmBroker |
| Type: | own |
| Path: | %WinDir%\system32\Sgrm\SgrmBroker.exe |
| Error control: | normal |
| Object: | LocalSystem |
| Privileges: |
|
Default Behavior
The System Guard Runtime Monitor Broker service is running as LocalSystem in its own process of SgrmBroker.exe. It doesn't share its process with other services. If System Guard Runtime Monitor Broker fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the SgrmBroker service has failed to start.
Dependencies
System Guard Runtime Monitor Broker is unable to start, if the Remote Procedure Call (RPC) service is stopped or disabled.
Restore Default Startup Type for System Guard Runtime Monitor Broker
Automated Restore
1. Select your Windows 11 edition and release, and then click on the Download button below.
2. Save the RestoreSystemGuardRuntimeMonitorBrokerWindows11.bat file to any folder on a local drive such as SSD or a hard disk.
3. Right-click the downloaded batch file and select Properties.
4. Check the Unblock checkbox and click OK.
5. Right-click the batch file again and select Run as administrator.
6. Restart the computer to save changes.
Note. Make sure that the SgrmBroker.exe file exists in the %WinDir%\system32\Sgrm folder. If this file is missing you can try to restore it from your Windows 11 installation media.