# Service Control Manager Settings

`Computer Configuration\Policies\Administrative Templates\System\Service Control Manager Settings\Security Settings`

- Enable svchost.exe mitigation options -> Enabled