|A component of Microsoft Windows|
Action Center in Windows 8: No issue has been detected
|Included with||Windows XP (SP2 and above)
Windows 7 (renamed Action Center)
|Service name||Security Center (wscsvc)|
|Backup and Restore Center
User Account Control
Windows Error Reporting
Windows Management Instrumentation
|Windows Security Center in Windows Vista, reporting antivirus protection missing|
|Windows Security Center in Windows XP Service Pack 2 reporting no antivirus product is installed|
Action Center (previously known as Windows Security Center) is a monitoring component included with Windows XP SP2, Windows Vista and its successors. It monitors the security and maintenance status of the computer. Its monitoring criteria includes optimal operation of personal firewalls, anti-virus software and anti-spyware software, as well as the working status of Network Access Protection, Windows Update, User Account Control, Windows Error Reporting and Backup and Restore. It notifies the user of any problem with the monitored criteria, e.g. when an antivirus program is not up-to-date or is offline.
The control panel applet divides the monitored criteria into categories and color-codes them. Yellow indicates a non-critical warning, e.g. some settings are not being monitored or are not optimal. Red indicates a critical message, e.g. anti-virus program is offline.
A service, named "Security Center", determines the current state of the settings. The service, by default, starts when the computer starts; it continually monitors the system for changes, and notifies the user if it detects a problem. It inserts a notification icon in Windows Taskbar.
A WMI provider makes the settings available to the system. Third-party anti-virus, anti-spyware and personal firewall software vendors primarily register with Action Center through the WMI provider. Windows Vista added a new set of API to let programs retrieve the aggregate health status of Action Center, and to receive notifications when the health status changes. They help programs confirm that the system is in a healthy state before engaging in certain actions. For example, a computer game can ensure that a firewall is running before connecting to an online game.
|This section requires expansion. (October 2014)|
Tasks run via Action Center may include:
- Power Efficiency Diagnostics, which analyzes power usage
Windows XP SP2
Microsoft learned from discussions with customers that there was confusion as to whether users were taking appropriate steps to protect their systems, or if the steps they were taking were effective. From this research, Microsoft made the decision to include a visible control panel with Windows XP Service Pack 2 that would provide a consolidated view of the most important security features. Service Pack 2, released in August 2004, includes the first version of Windows Security Center (WSC). This version monitors Windows Update, Windows Firewall, and the availability of an anti-virus program. Third-party providers of personal firewall and anti-virus software packages were encouraged to use WSC API to register their products with WSC.
WSC in Windows Vista monitors new criteria, such as anti-spyware software, User Account Control, and Internet Explorer security settings. It can display logos of third-party products that have been registered with the Security Center.
Unlike Windows XP, in the beta versions of Windows Vista, WSC could not be disabled or overridden. Security software maker Symantec spoke out against this, noting that it would cause a great deal of consumer confusion because any security problems would be reported by both WSC and Symantec's tools at the same time. McAfee, another large security software vendor, lodged similar complaints. In the end, Microsoft allowed WSC to be disabled.
In Windows 7, Windows Security Center has been renamed Action Center. (It was called Windows Solution Center and Windows Health Center in earlier builds.) It was designed centralize and reduce the number of notifications about the system; as such, it encompasses both security and maintenance of the computer. Its notification icon on Windows Taskbar only appears when there is a message for perusal and replaces five separate notification icons found in Windows Vista.
Action Center monitors 10 new items: Microsoft account, Windows activation, SmartScreen, automatic maintenance, drive status, device software, startup apps, HomeGroup, File History, and Storage Spaces.
PC Magazine criticism
On 25 August 2004, PC Magazine published an article in their Security Watch newsletter titled "Windows XP SP2 Security Center Spoofing Threat" which outlined a design vulnerability which could allow malware to manipulate Security Center into displaying a false security status regardless of the true security status. To do so, the malware requires administrative privileges.
- The service identifier is "wscsvc".
- Stanek, William (2014). Windows Server 2012 R2 Inside Out Volume 1: Configuration, Storage, & Essentials. Inside Out 1. Microsoft Press. ISBN 9780735685611. Retrieved 2014-10-27. "In Task Scheduler, the following tasks are triggered by automated maintenance: [...] Microsoft\Windows\Power Efficiency Diagnostics. Analyzes power usage"
- "Microsoft Windows Security Center: The Voice of Security for Windows Vista". Microsoft. 6 October 2006. Retrieved 16 November 2009.
- Jeremy Reimer (2006-09-27). "Symantec says Vista will "reduce consumer choice"". Ars Technica. Retrieved 2006-10-14.
- Hines, Matt (2006-10-03). "McAfee Chides Microsoft Over Vista Security Policies". eWeek.
- Seltzer, Larry (2006-10-16). "Microsoft Caves on Vista Security". eWeek. Retrieved 2008-08-13.
- Gilmour, Sean (11 November 2008). Sinofsky, Steven, ed. "Action Center". Engineering Windows 7. Microsoft. Retrieved 29 October 2014.
- Rubenking, Neil J. (20 November 2008). "Security in Windows 7: Getting Started". PC Magazine. Ziff Davis.
- Shultz, Greg (2 August 2012). "Keep tabs on performance in Windows 8 with Action Center". TechRepublic. CBS Interactive. Retrieved 29 October 2014.
- Jay Munro (25 August 2004). "Windows XP SP2 Security Center Spoofing Threat". Security Watch. PC Magazine. Retrieved 16 November 2009.
- MSKB 883792: Frequently asked questions about Windows Security Center[dead link]
- MSDN: Windows Security Center API