Secure Socket Tunneling Protocol Service (SstpSvc) Defaults in Windows 11

Provides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers.

Default Settings

Startup type: Manual
Display name:Secure Socket Tunneling Protocol Service
Service name:SstpSvc
Service type:share
Error control:normal
Object:NT Authority\LocalService
Path:%SystemRoot%\system32\svchost.exe -k LocalService -p
File:%SystemRoot%\system32\sstpsvc.dll
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SstpSvc
Privileges:
  • SeChangeNotifyPrivilege
  • SeImpersonatePrivilege

Default Behavior

Secure Socket Tunneling Protocol Service is a Win32 service. In Windows 11 it starts only if the user, an application or another service starts it. When the Secure Socket Tunneling Protocol Service is started, it logs on as NT Authority\LocalService and running in a shared process of svchost.exe. If Secure Socket Tunneling Protocol Service fails to start, the failure details will be recorded into Event Log. Then Windows 11 should boot up and notify the user about the SstpSvc service startup failure.

Dependencies

If Secure Socket Tunneling Protocol Service doesn't work properly, the Remote Access Connection Manager service can't start.

Restore Default Startup Configuration of Secure Socket Tunneling Protocol Service

1. Run the Command Prompt as an administrator.

2. Copy the command below, paste it into the command window and press ENTER:

sc config SstpSvc start= demand

3. Close the command window and restart the computer.

The SstpSvc service is using the sstpsvc.dll file that is located in the C:\Windows\system32 directory. If the file is removed or corrupted, read this article to restore its original version from Windows 11 installation media.