Windows Defender Network Inspection Service (WdNisSvc) Defaults in Windows 8

Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols.

Default Settings

Startup type:Manual
Display name:Windows Defender Network Inspection Service
Service name:WdNisSvc
Service type:own
Error control:normal
Object:NT AUTHORITY\LocalService
Path:%ProgramFiles%\Windows Defender\NisSrv.exe
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc

Default Behavior

The Windows Defender Network Inspection Service is a Win32 program that can be started by the Service Controller and that obeys the service control protocol. In Windows 8 it will not be started until the user starts it. When the Windows Defender Network Inspection Service is started, it runs as NT AUTHORITY\LocalService in its own process of NisSrv.exe. If Windows Defender Network Inspection Service fails to start, the error details are added to Windows 8 error log. When the operating system startup is complete, the user is being notified that the WdNisSvc service hasn't been started.

Dependencies

Windows Defender Network Inspection Service can't start, if the Windows Defender Network Inspection System Driver service is disabled or not available.

Restore Default Startup Configuration for Windows Defender Network Inspection Service

Before you begin doing this, make sure that all the services on which Windows Defender Network Inspection Service depends are configured by default and function properly. See the list of dependencies above.

1. Run the Command Prompt as an administrator.

2. Copy the command below, paste it into the command window and press ENTER:

sc config WdNisSvc start= demand

3. Close the command window and restart the computer.

The WdNisSvc service is using the NisSrv.exe file that is located in the %ProgramFiles%\Windows Defender folder. If the file is corrupted or deleted, you can put it back in there.