# Service Control Manager Settings

`Computer Configuration\Policies\Administrative Templates\System\Service Control Manager Settings`

- Security Settings -> Enable svchost.exe mitigation options -> Enabled