Microsoft Keyboard Filter (MsKeyboardFilter) Service Defaults in Windows 8

Controls keystroke filtering and mapping.

Default Settings

Startup type:
Windows 8 Core Windows 8N/A
Windows 8 Pro Windows 8N/A
Windows 8 Enterprise Windows 8N/A
Windows 8 Core Windows 8.1N/A
Windows 8.1 ProDisabled
Windows 8.1 EnterpriseDisabled
Windows 8 Core Windows 8.1 Update 1N/A
Windows 8.1 Update 1 ProDisabled
Windows 8.1 Update 1 EnterpriseDisabled
Display name:Microsoft Keyboard Filter
Service name:MsKeyboardFilter
Service type:share
Error control:normal
Object:LocalSystem
Path:%SystemRoot%\system32\svchost.exe -k netsvcs
File:%SystemRoot%\System32\KeyboardFilterSvc.dll
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MsKeyboardFilter
Privileges:
  • SeTcbPrivilege
  • SeAssignPrimaryTokenPrivilege

Default Behavior

Microsoft Keyboard Filter is a Win32 service. In Windows 8 it is disabled and therefore it won't start under any conditions. When the Microsoft Keyboard Filter service is started, it runs as LocalSystem in a process of svchost.exe, sharing it with other services. If Microsoft Keyboard Filter fails to start, the error details are added to Windows 8 error log. When the operating system startup is complete, the user is being notified that the MsKeyboardFilter service hasn't been started.

Restore Default Startup Configuration for Microsoft Keyboard Filter

1. Run the Command Prompt as an administrator.

2. Copy the commands below, paste them into the command window and press ENTER:

sc stop MsKeyboardFilter
sc config MsKeyboardFilter start= disabled

3. Close the command window and restart the computer.

The MsKeyboardFilter service is using the KeyboardFilterSvc.dll file that is located in the %WinDir%\System32 folder. If the file is corrupted or deleted, you can put it back in there.