Microsoft Keyboard Filter (MsKeyboardFilter) Service Defaults in Windows 8

Controls keystroke filtering and mapping.

Default Settings

Startup type:
Windows 8 Core Windows 8N/A
Windows 8 Pro Windows 8N/A
Windows 8 Enterprise Windows 8N/A
Windows 8 Core Windows 8.1N/A
Windows 8.1 ProDisabled
Windows 8.1 EnterpriseDisabled
Windows 8 Core Windows 8.1 Update 1N/A
Windows 8.1 Update 1 ProDisabled
Windows 8.1 Update 1 EnterpriseDisabled
Display name:Microsoft Keyboard Filter
Service name:MsKeyboardFilter
Service type:share
Error control:normal
Object:LocalSystem
Path:%SystemRoot%\system32\svchost.exe -k netsvcs
File:%SystemRoot%\System32\KeyboardFilterSvc.dll
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MsKeyboardFilter
Privileges:
  • SeTcbPrivilege
  • SeAssignPrimaryTokenPrivilege

Default Behavior

Microsoft Keyboard Filter is a Win32 service. In Windows 8 it is disabled and therefore it won't start under any conditions. When the Microsoft Keyboard Filter service is started, it runs as LocalSystem in a process of svchost.exe, sharing it with other services. If Microsoft Keyboard Filter fails to start, the error details are added to Windows 8 error log. When the operating system startup is complete, the user is being notified that the MsKeyboardFilter service hasn't been started.

Restore Default Startup Configuration for Microsoft Keyboard Filter

1. Select your Windows 8 edition and update pack, and then click Download.

2. Save the Win8_MsKeyboardFilter_Service_Startup.cmd file to a local storage device.

3. Run the saved file as an administrator.

4. Restart the computer.

The MsKeyboardFilter service is using the KeyboardFilterSvc.dll file that is located in the %WinDir%\System32 folder. If the file is corrupted or deleted, you can put it back in there.