Web Threat Defense Service - Windows 11 Service
Web Threat Defense Endpoint Service helps protect your computer by identifying unauthorized entities attempting to gain access to user credentials.
This service exists in Windows 11 only.
Startup Type
| Windows 11 version | Home | Pro | Education | Enterprise |
|---|---|---|---|---|
| 21H2 | not exists | not exists | not exists | not exists |
| 22H2 | Manual | Manual | Manual | Manual |
| 23H2 | Manual | Manual | Manual | Manual |
| 24H2 | Manual | Manual | Manual | Manual |
Default Properties
| Display name: | Web Threat Defense Service |
| Service name: | webthreatdefsvc |
| Type: | share |
| Path: | %WinDir%\system32\svchost.exe -k WebThreatDefense -p |
| File: | %WinDir%\System32\webthreatdefsvc.dll |
| Error control: | normal |
| Object: | NT AUTHORITY\LocalService |
Default Behavior
The Web Threat Defense Service is running as NT AUTHORITY\LocalService in a shared process of svchost.exe. Other services might run in the same process. If Web Threat Defense Service fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the webthreatdefsvc service has failed to start.
Dependencies
Web Threat Defense Service is unable to start, if at least one of the following services is stopped or disabled:
Restore Default Startup Type for Web Threat Defense Service
Automated Restore
1. Select your Windows 11 edition and release, and then click on the Download button below.
2. Save the RestoreWebThreatDefenseServiceWindows11.bat file to any folder on a local drive such as SSD or a hard disk.
3. Right-click the downloaded batch file and select Properties.
4. Check the Unblock checkbox and click OK.
5. Right-click the batch file again and select Run as administrator.
6. Restart the computer to save changes.
Note. Make sure that the webthreatdefsvc.dll file exists in the %WinDir%\System32 folder. If this file is missing you can try to restore it from your Windows 11 installation media.