Windows Defender Network Inspection Service (WdNisSvc) Defaults in Windows 8

Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols.

Default Settings

Startup type:Manual
Display name:Windows Defender Network Inspection Service
Service name:WdNisSvc
Service type:own
Error control:normal
Object:NT AUTHORITY\LocalService
Path:%ProgramFiles%\Windows Defender\NisSrv.exe
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc

Default Behavior

The Windows Defender Network Inspection Service is a Win32 program that can be started by the Service Controller and that obeys the service control protocol. In Windows 8 it will not be started until the user starts it. When the Windows Defender Network Inspection Service is started, it runs as NT AUTHORITY\LocalService in its own process of NisSrv.exe. If Windows Defender Network Inspection Service fails to start, the error details are added to Windows 8 error log. When the operating system startup is complete, the user is being notified that the WdNisSvc service hasn't been started.

Dependencies

Windows Defender Network Inspection Service can't start, if the Windows Defender Network Inspection System Driver service is disabled or not available.

Restore Default Startup Configuration for Windows Defender Network Inspection Service

1. Select your Windows 8 edition and update pack, and then click Download.

2. Save the Win8_WdNisSvc_Service_Startup.cmd file to a local storage device.

3. Run the saved file as an administrator.

4. Restart the computer.

The WdNisSvc service is using the NisSrv.exe file that is located in the %ProgramFiles%\Windows Defender folder. If the file is corrupted or deleted, you can put it back in there.