batcmd.com Windows 11 Services

Microsoft Defender Antivirus Service - Windows 11 Service

Helps protect users from malware and other potentially unwanted software.

This service also exists in Windows 10, 7, 8 and Vista.

Startup Type

Windows 11 version Home Pro Education Enterprise
21H2 Automatic Automatic Automatic Automatic
22H2 Automatic Automatic Automatic Automatic
23H2 Automatic Automatic Automatic Automatic
24H2 Automatic Automatic Automatic Automatic

Default Properties

Display name:Microsoft Defender Antivirus Service
Service name:WinDefend
Type:own
Path:%ProgramFiles%\Windows Defender\MsMpEng.exe
Error control:normal
Object:LocalSystem
Privileges:
  • SeImpersonatePrivilege
  • SeBackupPrivilege
  • SeRestorePrivilege
  • SeDebugPrivilege
  • SeChangeNotifyPrivilege
  • SeLoadDriverPrivilege
  • SeSecurityPrivilege
  • SeShutdownPrivilege
  • SeIncreaseQuotaPrivilege
  • SeAssignPrimaryTokenPrivilege
  • SeTcbPrivilege
  • SeIncreaseBasePriorityPrivilege
  • SeSystemEnvironmentPrivilege
  • SeTakeOwnershipPrivilege

Default Behavior

The Microsoft Defender Antivirus Service is running as LocalSystem in its own process of MsMpEng.exe. It doesn't share its process with other services. If Microsoft Defender Antivirus Service fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the WinDefend service has failed to start.

Dependencies

Microsoft Defender Antivirus Service is unable to start, if the Remote Procedure Call (RPC) service is stopped or disabled.

Restore Default Startup Type for Microsoft Defender Antivirus Service

Automated Restore

1. Select your Windows 11 edition and release, and then click on the Download button below.

2. Save the RestoreMicrosoftDefenderAntivirusServiceWindows11.bat file to any folder on a local drive such as SSD or a hard disk.

3. Right-click the downloaded batch file and select Properties.

4. Check the Unblock checkbox and click OK.

5. Right-click the batch file again and select Run as administrator.

6. Restart the computer to save changes.

Note. Make sure that the MsMpEng.exe file exists in the %ProgramFiles%\Windows Defender folder. If this file is missing you can try to restore it from your Windows 11 installation media.

Yea, though I walk through the valley of the shadow of death, I will fear no evil: for thou art with me; thy rod and thy staff they comfort me.