Microsoft Keyboard Filter (MsKeyboardFilter) Service Defaults in Windows 8

Controls keystroke filtering and mapping.

The Microsoft Keyboard Filter service exists only in:

Default Settings

Startup type: Disabled
Display name:Microsoft Keyboard Filter
Service name:MsKeyboardFilter
Service type:share
Error control:normal
Object:LocalSystem
Path:%SystemRoot%\system32\svchost.exe -k netsvcs
File:%SystemRoot%\System32\KeyboardFilterSvc.dll
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MsKeyboardFilter
Privileges:
  • SeTcbPrivilege
  • SeAssignPrimaryTokenPrivilege

Default Behavior

Microsoft Keyboard Filter is a Win32 service. In Windows 8 it is disabled and therefore it won't start under any conditions. When the Microsoft Keyboard Filter service is started, it runs as LocalSystem in a process of svchost.exe, sharing it with other services. If Microsoft Keyboard Filter fails to start, the error details are added to Windows 8 error log. When the operating system startup is complete, the user is being notified that the MsKeyboardFilter service hasn't been started.

Restore Default Startup Configuration of Microsoft Keyboard Filter

1. Run the Command Prompt as an administrator.

2. Copy the commands below, paste them into the command window and press ENTER:

sc stop MsKeyboardFilter
sc config MsKeyboardFilter start= disabled

3. Close the command window and restart the computer.

The MsKeyboardFilter service is using the KeyboardFilterSvc.dll file that is located in the C:\Windows\System32 directory. If the file is removed or corrupted, read this article to restore its original version from Windows 8 installation media.