Windows Defender Network Inspection System Driver (WdNisDrv) Service Defaults in Windows 8

Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols.

Default Settings

Startup type:Manual
Display name:Windows Defender Network Inspection System Driver
Service name:WdNisDrv
Service type:kernel
Error control:normal
Path:%SystemRoot%\system32\Drivers\WdNisDrv.sys
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv

Default Behavior

The Windows Defender Network Inspection System Driver service is a kernel device driver. In Windows 8 it will not be started until the user starts it. If Windows Defender Network Inspection System Driver fails to start, the error details are added to Windows 8 error log. When the operating system startup is complete, the user is being notified that the WdNisDrv service hasn't been started.

Dependencies

Windows Defender Network Inspection System Driver can't start, if any service from the list below is disabled or not available:

If Windows Defender Network Inspection System Driver is disabled, the Windows Defender Network Inspection Service will not be started and initialized.

Restore Default Startup Configuration for Windows Defender Network Inspection System Driver

1. Select your Windows 8 edition and update pack, and then click Download.

2. Save the Win8_WdNisDrv_Service_Startup.cmd file to a local storage device.

3. Run the saved file as an administrator.

4. Restart the computer.

The WdNisDrv service is using the WdNisDrv.sys file that is located in the %WinDir%\system32\Drivers folder. If the file is corrupted or deleted, you can put it back in there.