Microsoft Passport Container (NgcCtnrSvc) startup type, default configuration, and information
Registry Name:
NgcCtnrSvc
Display Name:
Microsoft Passport Container
Description:
Manages local user identity keys used to authenticate user to identity providers as well as TPM virtual smart cards. If this service is disabled, local user identity keys and TPM virtual smart cards will not be accessible. It is recommended that you do not reconfigure this service.
For more information, see the Additional Information section.
Default Status:
Stopped
Default Startup Type:
Manual (Trigger Start)
Learn more about the different startup types of Windows services in Microsoft Windows.
Image Path:
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
svchost.exe is a system process that hosts and manages Windows services running from DLL files rather than standalone executable files, allowing Windows to modularize and efficiently manage background tasks.
svchost.exe loads and runs Windows services, such as networking, Windows Update, audio, and many others. Multiple instances of svchost.exe can run simultaneously, each hosting different services. This helps with stability and security—if one service fails, it doesn't crash all services.
DLL File Path:
C:\WINDOWS\System32\NgcCtnrSvc.dll
Dependencies:
The service depends on the following system components to function properly:
System components that depend on this service to function properly:
- None
Log On As:
NT AUTHORITY\LocalService
Additional Information:
The Microsoft Passport Container (NgcCtnrSvc) service is a security component in Windows that manages Windows Hello credentials and other authentication data. It securely stores biometric (fingerprint, facial recognition) and PIN-based login information in an encrypted container, enabling passwordless sign-ins for Microsoft accounts and enterprise systems.
This service is essential for Windows Hello functionality, ensuring quick and secure access to devices and apps. Disabling it will break biometric/PIN logins, reverting to traditional passwords.
Windows Service Startup Type:
In Microsoft Windows, Windows services can be configured with different startup types that determine how and when they are started:
- Automatic: The service starts automatically when Windows boots.
- Automatic (Delayed Start): The service starts automatically after the system has finished booting and initial services have started, helping improve startup performance.
- Manual: The service does not start automatically. It must be started by a user or another process when needed.
- Manual (Trigger Start): The service starts manually or in response to specific system events (triggers), such as device insertion or network changes.
- Disabled: The service is prevented from starting, even if required by the system or an application.