What is the CDPUserSvc service?

42

5

In my machine there's a service called CDPUserSvc_1bf5729. The description says

Failed to Read Description. Error Code: 15100

The path to the executable is C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup, and the startup type is Automatic. If I attempt to set the startup type to Disabled, I got an error message saying "The parameter is incorrect".

What is this service?

enter image description here

Chin

Posted 2016-08-20T19:06:07.587

Reputation: 6 937

1Don't know why MS hasn't seen it but this is a pretty bad name for a process or service. It means that viral processes can also use a arbitrary name like CDPUserSvc_1bf5729 and users won't be able to tell whether its a bad process or virus.. thus hiding legit viruses.. – alpha_989 – 2018-08-12T03:14:10.840

From your screenshot it seems texts on your screen are blurry. Try this method to fix that problem.

– Sнаđошƒаӽ – 2019-01-31T14:48:26.227

Answers

19

It's part of Connected Devices Platform Service.

CDP Service itself says: This service is used for Connected Devices and Universal Glass scenarios.

The files are all c:\windows\system32\cdp*.dll:

cdp.dll
cdprt.dll
cdpusersvc.dll
cdprefernce.exe

Slightly more about that here: http://www.tenforums.com/general-support/58863-connected-devices-platform-service-what-does-do.html

I recommend reading the reference to the ZDNet Article on "Project Rome" in the link above.

If you use "strings" on the cdpusersvc.dll you will find references to Universal Glass and a few other backend bits.

TG2

Posted 2016-08-20T19:06:07.587

Reputation: 814

7"CDP Service itself says: This service is used for Connected Devices and Universal Glass scenarios" ... yes, the service can say whatever it wants to. It could just say "hi, I'm a service". As a developer, I'm a bit concerned about seeing all these strange, non-configurable services showing up as "updates" to the operating system. I have also had a tough time shutting this particular, name-changing service off. – Patrick – 2016-09-05T12:35:16.177

2@3498DB, if its a legit service.. will it still have the random string at the end (1bf5729)? I haven't ever seen a legit service which has such a random tag at the end? – alpha_989 – 2018-08-12T03:06:56.247

On technet, it is alleged that may be just to uniquely distinguish "set of services" running across users (possibly via client impersonation I believe, so that you don't actually have them duplicated).

– mirh – 2019-10-02T12:24:49.003

Is there any reason for having those random letters/numbers at the end? They differ from mine, and from other people too. – Nicke Manarin – 2019-11-21T17:08:02.477

9

If you want to disable the service, you can do so by modifying both the registry keys with the name:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPUserSvc

In both keys, modify the value Start from 2 to 4 and restart.

Ryakna

Posted 2016-08-20T19:06:07.587

Reputation: 1 020

1Beware that one should just do this if you are NOT using any bluetooth or wireless device with your PC/Laptop! – LAOMUSIC ARTS – 2016-11-04T08:58:52.147

What do you mean "both the registry keys with the [same] name"? – Scott – 2016-11-13T18:35:56.600

3This does not help a whole lot as it gets recreated upon reboot. – Andrew Savinykh – 2016-11-29T08:09:36.033

4

The reason it fails to read the description is actually because the service doesn't have a describer assigned to it. The services' description tag is empty so it's basically trying to read a description that is not there.

It should not effect it's ability to run and perform. Descriptions are for user's eyes only and have nothing to do with the actual functionality of the system.

It cannot be disabled because the service is a critical kernel-level service, just like how the RPC service is. Disabling it will cause core components to fail. It's also required for the settings app to function and any windows store apps that use wireless adapters (Bluetooth, NFC, etc) will fail to run. The service is deliberately locked by the Windows team to keep people from disabling the service and BSOD their PCs (I was able to remove most of the security around this service to disable it on a test machine. Each time it will blue screen when disabled).

Quilnux

Posted 2016-08-20T19:06:07.587

Reputation: 49

This doesn't ring true; I have disabled this service on Windows 10 Pro v1709 (and its companion service with the same name but appended with a random string), and it didn't cause me to crash. In fact, it fixed my inexplicable WiFi disconnecting issue. – TylerH – 2017-12-21T14:50:23.047