System Events Broker (SystemEventsBroker) Service Defaults in Windows 8

Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered.

Default Settings

Startup type:
Windows 8 CoreManual
Windows 8 ProManual
Windows 8 EnterpriseManual
Windows 8.1 CoreAutomatic
Windows 8.1 ProAutomatic
Windows 8.1 EnterpriseAutomatic
Windows 8.1 Update 1 CoreAutomatic
Windows 8.1 Update 1 ProAutomatic
Windows 8.1 Update 1 EnterpriseAutomatic
Display name:System Events Broker
Service name:SystemEventsBroker
Service type:share
Error control:normal
Object:LocalSystem
Path:%SystemRoot%\system32\svchost.exe -k DcomLaunch
File:%SystemRoot%\System32\SystemEventsBrokerServer.dll
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SystemEventsBroker
Privileges:
  • SeCreateGlobalPrivilege
  • SeImpersonatePrivilege
  • SeTcbPrivilege
  • SeCreatePermanentPrivilege

Default Behavior

System Events Broker is a Win32 service. It will not be started until the user starts it in all editions of Windows 8. This service is starting automatically during the operating system startup in all editions of Windows 8.1, Windows 8.1 Update 1.

When the System Events Broker service is started, it runs as LocalSystem in a process of svchost.exe, sharing it with other services. If System Events Broker fails to start, the error details are added to Windows 8 error log. When the operating system startup is complete, the user is being notified that the SystemEventsBroker service hasn't been started.

Restore Default Startup Configuration of System Events Broker

1. Run the Command Prompt as an administrator.

2. Depending on the version of your operating system, copy the commands below, paste them into the command window and press ENTER.

For Windows 8 Core, Windows 8 Pro, Windows 8 Enterprise:
sc config SystemEventsBroker start= demand

For Windows 8.1 Core, Windows 8.1 Pro, Windows 8.1 Enterprise, Windows 8.1 Update 1 Core, Windows 8.1 Update 1 Pro, Windows 8.1 Update 1 Enterprise:
sc config SystemEventsBroker start= auto
sc start SystemEventsBroker

3. Close the command window and restart the computer.

The SystemEventsBroker service is using the SystemEventsBrokerServer.dll file that is located in the C:\Windows\System32 directory. If the file is removed or corrupted, read this article to restore its original version from Windows 8 installation media.