Skip to content

WINDOWS SERVICE

RemoteRegistry: Remote Registry

Enables remote users to modify registry settings on this computer.

TECHNICAL SUMMARY

Service nameRemoteRegistry
Display nameRemote Registry
Runs fromC:\Windows\System32\svchost.exe
Command linesvchost.exe -k localService -p
Runs asLocalService
VerdictDepends on what you use
Microsoft, Windows Server 2016 guidanceDo not disable

Paths, signer and service account observed on Windows 11 build 26300 on 12 November 2026. Run the commands below to check your own PC.

Should you touch it?

Depends on what you use

Microsoft's two lists rate it Do not disable, but both are written for servers and fixed-purpose devices that are managed remotely. Microsoft also states the effect plainly: if the service is stopped, only users on this computer can modify the registry. On the Windows 11 PC used for this page it was set to Disabled and stopped. Turn it on only if an administrator or a tool manages this PC over the network.

What PC Tweaker does with it

PC Tweaker does not change this service. No control in the catalogue stops it, disables it or edits its start type.

Check it yourself

  1. See its state and start type

    Get-Service RemoteRegistry | Format-List Name, DisplayName, Status, StartType
    sc qc RemoteRegistry
    PowerShell
  2. Let it start only when needed (administrator)

    Note the START_TYPE that sc qc printed first, so you can put it back.

    sc config RemoteRegistry start= demand
    cmd
  3. Put it back

    Use the start type you noted.

    sc config RemoteRegistry start= <auto|delayed-auto|demand>
    cmd

Common questions

What does the RemoteRegistry service do?

Enables remote users to modify registry settings on this computer. It runs C:\Windows\System32\svchost.exe (svchost.exe -k localService -p) as LocalService.

Can I disable RemoteRegistry?

Depends on what you use. Microsoft's two lists rate it Do not disable, but both are written for servers and fixed-purpose devices that are managed remotely. Microsoft also states the effect plainly: if the service is stopped, only users on this computer can modify the registry. On the Windows 11 PC used for this page it was set to Disabled and stopped. Turn it on only if an administrator or a tool manages this PC over the network.

Remote Registry is disabled on my PC. Should I enable it?

Only if something that manages the PC over the network needs it. Microsoft's description is that the service lets remote users modify registry settings on this computer, and that with it stopped only users on this computer can modify the registry: local changes do not go through it.

How do I check that it is the real service?

On Windows 11 build 26300 it is registered as svchost.exe -k localService -p, runs as LocalService and loads C:\Windows\system32\regsvc.dll, signed by Microsoft Windows. It depends on RpcSs and has a trigger registered. sc qc RemoteRegistry prints the same on your PC.