Windows Defender Network Inspection System Driver (WdNisDrv) Service Defaults in Windows 8

Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols.

The Windows Defender Network Inspection System Driver service does not exist in:

Default Settings

Startup type: Manual
Display name:Windows Defender Network Inspection System Driver
Service name:WdNisDrv
Service type:kernel
Error control:normal
Path:%SystemRoot%\system32\Drivers\WdNisDrv.sys
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv

Default Behavior

The Windows Defender Network Inspection System Driver service is a kernel device driver. In Windows 8 it will not be started until the user starts it. If Windows Defender Network Inspection System Driver fails to start, the error details are added to Windows 8 error log. When the operating system startup is complete, the user is being notified that the WdNisDrv service hasn't been started.

Dependencies

Windows Defender Network Inspection System Driver can't start, if any service from the list below is disabled or not available:

If Windows Defender Network Inspection System Driver is disabled, the Windows Defender Network Inspection Service will not be started and initialized.

Restore Default Startup Configuration of Windows Defender Network Inspection System Driver

Before you begin doing this, make sure that all the services on which Windows Defender Network Inspection System Driver depends are configured by default and function properly. See the list of dependencies above.

1. Run the Command Prompt as an administrator.

2. Copy the command below, paste it into the command window and press ENTER:

sc config WdNisDrv start= demand

3. Close the command window and restart the computer.

The WdNisDrv service is using the WdNisDrv.sys file that is located in the C:\Windows\system32\Drivers directory. If the file is removed or corrupted, read this article to restore its original version from Windows 8 installation media.