WINDOWS SERVICE
WpnUserService: Windows Push Notifications User Service
A per-user service that hosts the Windows push notification platform, which provides support for local and push notifications: tile, toast and raw.
TECHNICAL SUMMARY
| Service name | WpnUserService |
|---|---|
| Display name | Windows Push Notifications User Service |
| Runs from | C:\Windows\System32\svchost.exe |
| Command line | svchost.exe -k UnistackSvcGroup |
| Runs as | The signed-in user |
| Verdict | Leave it alone |
| Microsoft, Windows Server 2016 guidance | OK to disable (user service template) |
Paths, signer and service account observed on Windows 11 build 26300 on 12 November 2026. Run the commands below to check your own PC.
Should you touch it?
Leave it aloneMicrosoft's guidance for Windows 10 and 11 IoT Enterprise rates it Don't disable; its Windows Server list rates it OK to disable. On a PC, the local and push notifications that apps show go through the platform it hosts. On the PC used for this page the instance for the signed-in user was running.
What PC Tweaker does with it
PC Tweaker does not change this service. No control in the catalogue stops it, disables it or edits its start type.
Check it yourself
See its state and start type
PowerShellGet-Service WpnUserService | Format-List Name, DisplayName, Status, StartType sc qc WpnUserService
Common questions
What does the WpnUserService service do?
A per-user service that hosts the Windows push notification platform, which provides support for local and push notifications: tile, toast and raw. It runs C:\Windows\System32\svchost.exe (svchost.exe -k UnistackSvcGroup) as The signed-in user.
Can I disable WpnUserService?
Leave it alone. Microsoft's guidance for Windows 10 and 11 IoT Enterprise rates it Don't disable; its Windows Server list rates it OK to disable. On a PC, the local and push notifications that apps show go through the platform it hosts. On the PC used for this page the instance for the signed-in user was running.
Why does the name end in random characters, like WpnUserService_67db3c?
It is a per-user service. Microsoft documents that Windows shows each one as the service name, an underscore and a locally unique identifier for the user context. The suffix differs between PCs and sign-ins; it is not a sign of malware.
How do I check that it is the real service?
On Windows 11 build 26300 the template is registered as svchost.exe -k UnistackSvcGroup, loads C:\Windows\System32\WpnUserService.dll, signed by Microsoft Windows, and depends on StateRepository. The running instance was hosted by svchost.exe -k UnistackSvcGroup -s WpnUserService.