Skip to content

WINDOWS SERVICE

CDPUserSvc: Connected Devices Platform User Service

A per-user service. Microsoft describes it as the service that allows the user to connect, manage and control connected devices, such as phones, Xbox consoles, HoloLens and smart or IoT devices, and gives sharing with nearby devices as an example. Windows creates it from a template when you sign in and runs it in the security context of your account; when you sign out it is stopped and deleted.

TECHNICAL SUMMARY

Service nameCDPUserSvc
Display nameConnected Devices Platform User Service
Runs fromC:\Windows\System32\svchost.exe
Command linesvchost.exe -k UnistackSvcGroup
Runs asThe signed-in user
VerdictDepends on what you use

Paths, signer and service account observed on Windows 11 build 26300 on 11 November 2026. Run the commands below to check your own PC.

Should you touch it?

Depends on what you use

Microsoft documents how to disable it through its template and asks you to test any template change carefully. With it disabled, the features it serves, such as sharing with nearby devices, have nothing to run on, and we know of no published measurement showing a speed benefit, so leave it unless you use none of those features and have a specific reason.

What PC Tweaker does with it

PC Tweaker does not change this service. No control in the catalogue stops it, disables it or edits its start type.

Check it yourself

  1. See its state and start type

    Get-Service CDPUserSvc | Format-List Name, DisplayName, Status, StartType
sc qc CDPUserSvc
    PowerShell

  2. Let it start only when needed (administrator)

    Note the START_TYPE that sc qc printed first, so you can put it back.

    sc config CDPUserSvc start= demand
    cmd

  3. Put it back

    Use the start type you noted.

    sc config CDPUserSvc start= <auto|delayed-auto|demand>
    cmd

Common questions

What does the CDPUserSvc service do?

A per-user service. Microsoft describes it as the service that allows the user to connect, manage and control connected devices, such as phones, Xbox consoles, HoloLens and smart or IoT devices, and gives sharing with nearby devices as an example. Windows creates it from a template when you sign in and runs it in the security context of your account; when you sign out it is stopped and deleted. It runs C:\Windows\System32\svchost.exe (svchost.exe -k UnistackSvcGroup) as The signed-in user.

Can I disable CDPUserSvc?

Depends on what you use. Microsoft documents how to disable it through its template and asks you to test any template change carefully. With it disabled, the features it serves, such as sharing with nearby devices, have nothing to run on, and we know of no published measurement showing a speed benefit, so leave it unless you use none of those features and have a specific reason.

Why does the name end in random characters, like CDPUserSvc_67db3c?

Microsoft documents that Windows shows every per-user service as the service name followed by an underscore and a locally unique identifier for the user context, and that the display name carries the same suffix. The suffix differs between PCs and sign-ins; it is not a sign of malware.

Can I disable CDPUserSvc?

Not from the Services console: Microsoft notes that the templates are not shown there. The documented route is the template in the registry, HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc, set by a security template, Group Policy preferences or a script. Windows then still creates the service at sign-in, but stopped and disabled. Note the value you change so that you can write it back.

How do I check that it is the real service?

Run tasklist /svc /fi "services eq CDPUserSvc*": the service should sit in a svchost.exe process. On Windows 11 build 26300 the template runs svchost.exe -k UnistackSvcGroup and loads C:\Windows\System32\CDPUserSvc.dll, which is signed by Microsoft Windows.