What Are the ErrorControl, Start, and Type Values Under Windows Services Subkeys?

Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.

Under HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices<ServiceName>, Windows stores configuration metadata for each installed service and driver service. Start controls when Windows attempts to load it, Type identifies the service or driver category and process arrangement, and ErrorControl defines how startup failures are handled. These DWORD values describe configuration—not necessarily the service’s current state or trustworthiness.

Find the values

In Registry Editor, browse to:

Computer
└── HKEY_LOCAL_MACHINE
    └── SYSTEM
        └── CurrentControlSet
            └── Services
                └── <ServiceName>

<ServiceName> is the internal name used by the Service Control Manager, not always the friendly name shown in services.msc. The same branch contains ordinary Win32 services and driver services. Registry Editor may show DWORDs in decimal or hexadecimal: 0x2 equals decimal 2, and 0x10 equals decimal 16. Microsoft documents this installed-services database at learn.microsoft.com.

#	Preview	Product	Price
1		Microsoft Windows Registry Guide, Second Edition	$37.19	Buy on Amazon
2		Microsoft Windows XP Registry Guide	$15.00	Buy on Amazon
3		WINDOWS REGISTRY : The beginner’s Guide	$30.00	Buy on Amazon
4		Fundamentals of Windows Registry	$22.00	Buy on Amazon
5		Windows Registry Troubleshooting	$39.11	Buy on Amazon

Quick reference

Start

For a Win32 service, Start=3 is often called “manual,” but demand start is the more precise term. Driver loading follows additional Plug and Play and kernel rules. Start=2 does not guarantee that the executable exists, dependencies are available, or startup succeeds. It also does not reveal whether the service uses delayed automatic startup; delayed-auto is additional configuration exposed by sc.exe, not a fifth raw Start value.

Type

Type is a bitmask, so values can combine flags. For example, 0x110 means own-process Win32 service plus the interactive flag, while 0x120 means shared-process plus that flag. A value of 0x10 says how the service is hosted; it says nothing about whether the software is legitimate.

#1 Best Overall

Sale

Microsoft Windows Registry Guide, Second Edition

• Used Book in Good Condition

$37.19

Buy on Amazon

ErrorControl

ErrorControl primarily concerns failure while services or drivers are being started as part of system startup. It is not the same as service recovery actions that restart a process after a later runtime crash, and it does not mean that no diagnostic information can exist when the value is 0.

Worked example

"Start"=dword:00000002
"Type"=dword:00000010
"ErrorControl"=dword:00000001

• Start=2: configured for automatic startup.
• Type=0x10: ordinary Win32 service in its own process.
• ErrorControl=1: normal startup-error handling; Windows records the error and normally continues.

Inspect a service without editing the registry

For a graphical review, press Win+R, run services.msc, and open the service’s properties. The Startup type there corresponds broadly to Start, but the console does not expose every driver-specific detail.

From an elevated Command Prompt, query the internal service name:

Rank #2

Sale

Microsoft Windows XP Registry Guide

• Used Book in Good Condition

$15.00

Buy on Amazon

sc.exe qc <ServiceName>

For example:

sc.exe qc Spooler

This reports service type, start type, error-control setting, binary path, dependencies, and account information from the Service Control Manager configuration.

For read-only registry inspection:

reg query "HKLMSYSTEMCurrentControlSetServices<ServiceName>" /v ErrorControl
reg query "HKLMSYSTEMCurrentControlSetServices<ServiceName>" /v Start
reg query "HKLMSYSTEMCurrentControlSetServices<ServiceName>" /v Type

Administrative access may be required. Verify the internal name before querying or changing anything.

Change configuration through supported tools

Microsoft recommends using Service Control Manager APIs and supported tools rather than editing the services database directly. With an elevated Command Prompt, examples include:

Rank #3

WINDOWS REGISTRY : The beginner’s Guide

$30.00

Buy on Amazon

sc.exe config <ServiceName> start= auto
sc.exe config <ServiceName> start= demand
sc.exe config <ServiceName> start= disabled
sc.exe config <ServiceName> start= delayed-auto
sc.exe config <ServiceName> error= normal
sc.exe config <ServiceName> type= own

The space after each equals sign is required: use start= auto, not start=auto. Supported start options include boot, system, auto, demand, disabled, and delayed-auto; error options include normal, severe, critical, and ignore. Do not casually change Type, especially for drivers or shared-process services.

If the service will not start

1. Check whether Start is 4 (disabled) and whether the displayed startup setting is what you intended.
2. Use sc.exe qc to review BINARY_PATH_NAME, dependencies, service type, and account.
3. Verify that the executable in ImagePath exists, has a valid path, and can run under the configured account.
4. Review the System event log and Service Control Manager error codes.
5. For drivers, consider signing, load-order groups, Plug and Play state, and boot or system-start requirements.
6. If a registry change prevents normal boot, restore the recorded values using Safe Mode or Windows Recovery Environment. Keep a backup or restore point before changes.

A missing or malformed value has no single universal fallback: behavior depends on how the service was installed and whether it is a Win32 or driver service. Treat it as a configuration problem and investigate the installation metadata and event logs.

What these three values do not tell you

They do not prove that a service is currently running, that it will start successfully, that it starts before every other automatic service, or that it is safe. For malware investigation, also examine ImagePath, DisplayName, Description, ObjectName (the service account), dependencies, file signature and publisher, binary location, modification history, and service-start events. An unfamiliar name or an ordinary-looking Type=0x10 is only a clue, not a verdict.

Rank #4

Fundamentals of Windows Registry

$22.00

Buy on Amazon

References: Microsoft service registry tree, QueryServiceConfig documentation, sc.exe config syntax, and Win32_Service name properties.

Frequently Asked Questions

Is Start=3 the same as Manual?

For Win32 services it is commonly described as manual, but the precise Service Control Manager term is demand start. Driver services with the same value can be loaded by Plug and Play when required.

Does Start=2 mean the service is running?

No. It means automatic startup is configured. Dependencies, missing files, permissions, triggers, delayed startup, or other failures can still leave the service stopped.

Best Value

Sale

Windows Registry Troubleshooting

$39.11

Buy on Amazon

Can I edit these DWORDs directly?

You can inspect them, but configuration changes should normally use the Services console, sc.exe, or Service Control Manager APIs. Direct edits can make a service or driver unstartable.

Does ErrorControl restart a crashed service?

No. It governs handling of startup failures, especially during system startup. Runtime restart actions are separate service-recovery settings.

Quick Recap

SaleBestseller No. 1

Microsoft Windows Registry Guide, Second Edition

Used Book in Good Condition

$37.19

SaleBestseller No. 2

Microsoft Windows XP Registry Guide

Used Book in Good Condition

$15.00

Bestseller No. 3

WINDOWS REGISTRY : The beginner’s Guide

$30.00

Bestseller No. 4

Fundamentals of Windows Registry

$22.00

SaleBestseller No. 5

Windows Registry Troubleshooting

$39.11

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.