WINDOWS SERVICE

SDRSVC: Windows Backup

Q: What does the SDRSVC service do?

Provides Windows Backup and Restore capabilities. It runs C:\Windows\System32\svchost.exe (svchost.exe -k SDRSVC) as LocalSystem.

Q: How do I check that it is the real service?

On Windows 11 build 26300 it is registered as svchost.exe -k SDRSVC, runs as LocalSystem and loads C:\Windows\System32\SDRSVC.dll, signed by Microsoft Windows. It depends on RpcSs.

Provides Windows Backup and Restore capabilities.

TECHNICAL SUMMARY

Service name	SDRSVC
Display name	Windows Backup
Runs from	C:\Windows\System32\svchost.exe
Command line	svchost.exe -k SDRSVC
Runs as	LocalSystem
Verdict	Depends on what you use

Paths, signer and service account observed on Windows 11 build 26300 on 12 November 2026. Run the commands below to check your own PC.

Should you touch it?

Depends on what you use

Microsoft's guidance for fixed-purpose Windows 10 and 11 IoT Enterprise devices rates it OK to disable. If you take backups with Windows Backup and Restore, leave it. Its default startup type is Manual: on the PC used for this page it was stopped.

What PC Tweaker does with it

PC Tweaker does not change this service. No control in the catalogue stops it, disables it or edits its start type.

Check it yourself

See its state and start type

Get-Service SDRSVC | Format-List Name, DisplayName, Status, StartType
sc qc SDRSVC

PowerShell

02
Let it start only when needed (administrator)
Note the START_TYPE that sc qc printed first, so you can put it back.
```
sc config SDRSVC start= demand
```
cmd

Put it back

Use the start type you noted.

sc config SDRSVC start= <auto|delayed-auto|demand>

cmd

Common questions

What does the SDRSVC service do?

Provides Windows Backup and Restore capabilities. It runs C:\Windows\System32\svchost.exe (svchost.exe -k SDRSVC) as LocalSystem.

Can I disable SDRSVC?

Depends on what you use. Microsoft's guidance for fixed-purpose Windows 10 and 11 IoT Enterprise devices rates it OK to disable. If you take backups with Windows Backup and Restore, leave it. Its default startup type is Manual: on the PC used for this page it was stopped.

Is SDRSVC the same as wbengine?

They are two services. Microsoft describes SDRSVC (Windows Backup) as providing Windows Backup and Restore capabilities, and wbengine (Block Level Backup Engine Service) as the service Windows Backup uses to perform backup and recovery operations.

How do I check that it is the real service?

On Windows 11 build 26300 it is registered as svchost.exe -k SDRSVC, runs as LocalSystem and loads C:\Windows\System32\SDRSVC.dll, signed by Microsoft Windows. It depends on RpcSs.