.      How to articles       Windows Services       Group Policy             Donate        
Computer step by step

How to Start/Stop IPsec Policy Agent

Service name: PolicyAgent

Display name: IPsec Policy Agent


Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality
 (encryption), and replay protection.  This service enforces IPsec policies created through the IP Security Policies snap-in or the
command-line tool "netsh ipsec".  If you stop this service, you may experience network connectivity issues if your policy requires that
connections use IPsec.  Also,remote management of Windows Defender Firewall is not available when this service is stopped.
Path to executable:

C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted -p

This method shows you how to Start/Stop IPsec Policy Agent service from Command Prompt

Perform the following steps:

Please go to Start and click on the Type here to search

Type cmd, right click on cmd icon under the Programs and click on Run as administrator

Services Regedit CMD Msconfig

Please confirm User Account Control pop-up

Please select, right and copy a registry key from below, then right click on command prompt window, select Paste and press Enter

To Start IPsec Policy Agent service:

net start PolicyAgent

sc start PolicyAgent

Note: You can’t start a service if Startup type is on Disabled.

To Stop IPsec Policy Agent service:

net stop PolicyAgent

sc stop PolicyAgent

To change Startup type:


REG add "HKLM\SYSTEM\CurrentControlSet\PerfHost\PolicyAgent" /v Start /t REG_DWORD /d 2 /f

sc config PolicyAgent start= auto


REG add "HKLM\SYSTEM\CurrentControlSet\services\PolicyAgent" /v Start /t REG_DWORD /d 3 /f

sc config PolicyAgent start= demand


REG add "HKLM\SYSTEM\CurrentControlSet\services\PolicyAgent" /v Start /t REG_DWORD /d 4 /f

sc config PolicyAgent start= disabled

Automatic (Delayed Start):

REG add "HKLM\SYSTEM\CurrentControlSet\services\PolicyAgent" /v Start /t REG_DWORD /d 2 /f

sc config PolicyAgent start= delayed-auto

Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.

REG add "HKLM\SYSTEM\CurrentControlSet\services\PolicyAgent" /v DelayedAutostart /t REG_DWORD /d 1 /f

When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.

REG add "HKLM\SYSTEM\CurrentControlSet\services\PolicyAgent" /v DelayedAutostart /t REG_DWORD /d 0 /f