Windows Defender Antivirus Network Inspection System Driver (WdNisDrv) Service Defaults in Windows 10

Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols.

Default Settings

Startup type:
Windows 10 Home 1507Automatic
Windows 10 Pro 1507Automatic
Windows 10 Education 1507Automatic
Windows 10 Enterprise 1507Automatic
Windows 10 Home 1511Manual
Windows 10 Pro 1511Manual
Windows 10 Education 1511Manual
Windows 10 Enterprise 1511Manual
Windows 10 Home 1607Manual
Windows 10 Pro 1607Manual
Windows 10 Education 1607Manual
Windows 10 Enterprise 1607Manual
Windows 10 Home 1703Manual
Windows 10 Pro 1703Manual
Windows 10 Education 1703Manual
Windows 10 Enterprise 1703Manual
Display name:Windows Defender Antivirus Network Inspection System Driver
Service name:WdNisDrv
Service type:kernel
Error control:normal
Path:%SystemRoot%\system32\Drivers\WdNisDrv.sys
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv

Default Behavior

Windows Defender Antivirus Network Inspection System Driver is a kernel device driver. It is starting automatically when the operating system starts in Windows 10 Home, Pro, Education, Enterprise. This service is starting only if the user, an application or another service starts it in Windows 10 Home 1511, Pro 1511, Education 1511, Enterprise 1511, Home 1607, Pro 1607, Education 1607, Enterprise 1607, Home 1703, Pro 1703, Education 1703, Enterprise 1703. If Windows Defender Antivirus Network Inspection System Driver fails to start, the failure details are being recorded into Event Log. Then Windows 10 will start up and notify the user that the WdNisDrv service has failed to start due to the error.

Dependencies

Windows Defender Antivirus Network Inspection System Driver cannot be started under any conditions, if the following services are disabled, deleted or working improperly:

While Windows Defender Antivirus Network Inspection System Driver is stopped, disabled or working incorrectly, the Windows Defender Antivirus Network Inspection Service cannot be launched.

Restore Default Startup Configuration for Windows Defender Antivirus Network Inspection System Driver

1. Select your Windows 10 edition and release, and then click Download.

2. Save the Win10_WdNisDrv_Service_Startup.cmd file to a local storage device.

3. Run the saved file as an administrator.

4. Restart the computer.

The WdNisDrv service is using the WdNisDrv.sys file that is located in the %WinDir%\system32\Drivers folder. If the file is changed, damaged or deleted, you can restore its original version from Windows 10 installation media.