Skip to content

WINDOWS SERVICE

AarSvc: Agent Activation Runtime

A per-user service. Microsoft describes it as the runtime for activating conversational agent applications.

TECHNICAL SUMMARY

Service nameAarSvc
Display nameAgent Activation Runtime
Runs fromC:\Windows\System32\svchost.exe
Command linesvchost.exe -k AarSvcGroup -p
Runs asThe signed-in user
VerdictLeave it alone

Paths, signer and service account observed on Windows 11 build 26300 on 12 November 2026. Run the commands below to check your own PC.

Should you touch it?

Leave it alone

Microsoft's guidance for Windows 10 and 11 IoT Enterprise rates it Don't disable. Its default startup type is Manual: on the PC used for this page the instance for the signed-in user was stopped, so it was not using anything.

What PC Tweaker does with it

PC Tweaker does not change this service. No control in the catalogue stops it, disables it or edits its start type.

Check it yourself

  1. See its state and start type

    Get-Service AarSvc | Format-List Name, DisplayName, Status, StartType
    sc qc AarSvc
    PowerShell

Common questions

What does the AarSvc service do?

A per-user service. Microsoft describes it as the runtime for activating conversational agent applications. It runs C:\Windows\System32\svchost.exe (svchost.exe -k AarSvcGroup -p) as The signed-in user.

Can I disable AarSvc?

Leave it alone. Microsoft's guidance for Windows 10 and 11 IoT Enterprise rates it Don't disable. Its default startup type is Manual: on the PC used for this page the instance for the signed-in user was stopped, so it was not using anything.

Why does the name end in random characters, like AarSvc_67db3c?

It is a per-user service. Microsoft documents that Windows shows each one as the service name, an underscore and a locally unique identifier for the user context. The suffix differs between PCs and sign-ins; it is not a sign of malware.

How do I check that it is the real service?

On Windows 11 build 26300 the template is registered as svchost.exe -k AarSvcGroup -p, loads C:\Windows\System32\AarSvc.dll, signed by Microsoft Windows, and depends on Audiosrv (Windows Audio).