WINDOWS SERVICE
mpssvc: Windows Defender Firewall
The Windows Firewall service. Microsoft describes it as helping to protect the computer by preventing unauthorized users from gaining access through the internet or a network.
TECHNICAL SUMMARY
| Service name | mpssvc |
|---|---|
| Display name | Windows Defender Firewall |
| Runs from | C:\Windows\System32\svchost.exe |
| Command line | svchost.exe -k LocalServiceNoNetworkFirewall -p |
| Runs as | LocalService |
| Verdict | Leave it alone |
| Microsoft, Windows Server 2016 guidance | No guidance |
Paths, signer and service account observed on Windows 11 build 26300 on 11 November 2026. Run the commands below to check your own PC.
Should you touch it?
Leave it aloneMicrosoft says stopping the Windows Firewall service is not supported and can cause problems: the Start menu can stop working, modern applications can fail to install or update, and activation of Windows by phone fails. If the firewall has to be off, Microsoft's method is to turn off the firewall profiles and leave the service running.
What PC Tweaker does with it
PC Tweaker does not change this service. No control in the catalogue stops it, disables it or edits its start type.
Check it yourself
See its state and start type
PowerShellGet-Service mpssvc | Format-List Name, DisplayName, Status, StartType sc qc mpssvc
Common questions
What does the mpssvc service do?
The Windows Firewall service. Microsoft describes it as helping to protect the computer by preventing unauthorized users from gaining access through the internet or a network. It runs C:\Windows\System32\svchost.exe (svchost.exe -k LocalServiceNoNetworkFirewall -p) as LocalService.
Can I disable mpssvc?
Leave it alone. Microsoft says stopping the Windows Firewall service is not supported and can cause problems: the Start menu can stop working, modern applications can fail to install or update, and activation of Windows by phone fails. If the firewall has to be off, Microsoft's method is to turn off the firewall profiles and leave the service running.
How do I turn the firewall off without stopping the service?
Turn off the profiles. Microsoft's documented command, from an elevated PowerShell prompt, is Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False, and -Enabled True puts it back. Microsoft recommends not disabling Windows Firewall at all, because other protections such as IPsec connection security rules and boot time filters go with it.
Which process runs the firewall service?
On Windows 11 build 26300 it ran in a svchost.exe -k LocalServiceNoNetworkFirewall -p process as LocalService, shared with the Base Filtering Engine (BFE), and loaded C:\Windows\System32\mpssvc.dll, signed by Microsoft Windows. It depends on mpsdrv, BFE and nsi, and Windows did not accept a stop request for it.