WINDOWS SERVICE

dot3svc: Wired AutoConfig

Q: How do I check that it is the real service?

On build 26300 it is registered as svchost.exe -k LocalSystemNetworkRestricted -p, runs as LocalSystem and loads C:\Windows\System32\dot3svc.dll, signed by Microsoft Windows. It depends on RpcSs, Ndisuio and EapHost.

Performs IEEE 802.1X authentication on Ethernet interfaces.

TECHNICAL SUMMARY

Service name	dot3svc
Display name	Wired AutoConfig
Runs from	C:\Windows\System32\svchost.exe
Command line	svchost.exe -k LocalSystemNetworkRestricted -p
Runs as	LocalSystem
Verdict	Depends on what you use
Microsoft, Windows Server 2016 guidance	No guidance

Paths, signer and service account observed on Windows 11 build 26300 on 12 November 2026. Run the commands below to check your own PC.

Should you touch it?

Depends on what you use

Microsoft states that wired networks which do not enforce 802.1X authentication are unaffected by this service, and that where 802.1X is enforced it should be configured to run. Its default startup type is Manual: on the PC used for this page, connected by Ethernet, it was stopped and the connection worked.

What PC Tweaker does with it

PC Tweaker does not change this service. No control in the catalogue stops it, disables it or edits its start type.

Check it yourself

See its state and start type

Get-Service dot3svc | Format-List Name, DisplayName, Status, StartType
sc qc dot3svc

PowerShell

02
Let it start only when needed (administrator)
Note the START_TYPE that sc qc printed first, so you can put it back.
```
sc config dot3svc start= demand
```
cmd

Put it back

Use the start type you noted.

sc config dot3svc start= <auto|delayed-auto|demand>

cmd

Common questions

What does the dot3svc service do?

Performs IEEE 802.1X authentication on Ethernet interfaces. It runs C:\Windows\System32\svchost.exe (svchost.exe -k LocalSystemNetworkRestricted -p) as LocalSystem.

Can I disable dot3svc?

Depends on what you use. Microsoft states that wired networks which do not enforce 802.1X authentication are unaffected by this service, and that where 802.1X is enforced it should be configured to run. Its default startup type is Manual: on the PC used for this page, connected by Ethernet, it was stopped and the connection worked.

Wired AutoConfig is not running. Is my Ethernet broken?

Not for that reason, unless your network requires 802.1X sign-in. Microsoft states that wired networks which do not enforce 802.1X authentication are unaffected by the service. On Windows 11 build 26300 it was stopped while the Ethernet connection was in use.

How do I check that it is the real service?

On build 26300 it is registered as svchost.exe -k LocalSystemNetworkRestricted -p, runs as LocalSystem and loads C:\Windows\System32\dot3svc.dll, signed by Microsoft Windows. It depends on RpcSs, Ndisuio and EapHost.