Fix: High CPU Usage by Service Host: Local System (Network Restricted)

Many Windows users have suffered from a problem where up to 95% of their CPU or/and Disk have been used by a process known as System Host: Local System (Network Restricted). This problem first surfaced back in the days of Windows 8 and has stuck around to haunt the brave users of Windows 10. Users affected by this issue have reported the System Host: Local System (Network Restricted) process hogging up to 95% of their CPU and up to 72 MB/s of their computer’s total capability to read data from and write data to its Hard Disk Drive. Those statistics are significant, to say the least.

However, System Host: Local System (Network Restricted), in and of itself, is pretty ambiguous as it is not anyone service but a guise under which many different Windows system services run, any of which could be causing unusually high CPU and/or Disk usage. Besides, to make things worse, this issue can also be caused by a memory leak in the non-paged pool of memory. Thankfully, due to a lot of intelligent dwelling on the matter, it has been found that the most common offender that gives birth to this issue is a Windows system service known as Superfetch – a service that Microsoft claims aims to maintain and improve the performance of computers as time goes by but, in actuality, is nothing but a problem waiting to happen. If, in any case, Superfetch is not the root of the issue, it is certainly being caused by a memory leak in the non-paged pool.

But before moving on with the solutions, make sure your system’s Firewall is not blocking any important service/application. Also, temporarily disable Windows updates to check if they are creating the problem.

1. Disable the Superfetch Service and Background Intelligent Transfer Service

Superfetch and Background Intelligent Transfer Service are services which perform a major role in speeding up your applications and other services running in the background. It basically manager several modules running side-by-side and efficiently schedules them. However, they might sometimes malfunction or not get in sync properly which will cause the high CPU usage. Disabling them might solve the issue.

  1. Press Windows Logo key + R to open a Run command box.
  2. Type services.msc into the Run dialog and press Enter.
  3. Scroll down the list of services on your computer and locate the service named Superfetch.
  4. Double-click on Superfetch to edit its settings.
  5. Click on Stop to stop the service.
  6. Set the Startup type for Superfetch to Disabled.
  7. Click on Apply and then on OK.
    service host local system
    Change Startup Type of Superfetch to Disabled
  8. Now find out the Background Intelligent Transfer Service and double-click to open its settings.
  9. Click on Stop to stop the service.
  10. Set the Startup Type for Background Intelligent Transfer Service to Disabled.
  11. Click on Apply and then on OK.
    Turn Off Background Intelligent Transfer Service
  12. Click Apply and OK to confirm the changes.
  13. Restart your computer and check if the problem has been fixed.

2. Fix the Memory Leak in the Non-Paged Pool of Memory

If Solution 1 doesn’t work, don’t fret as you can still move onto this solution. To try and resolve this issue using this solution, you need to:

  1. Press Windows Logo key + R to open a Run
  2. Type Regedit into the Run dialog and press Enter.
  3. In the left pane of the Registry Editor, navigate to the following directory:
    HKEY_LOCAL_MACHINE > SYSTEM > ControlSet001
  4. Click on Services in the left pane and then scroll down under services and choose “Ndu“.
  5. In the right pane, locate and double-click on the registry value titled Start to modify it.
  6. Change its Value data to 4. Doing so will disable it and plug the memory leak in the non-paged pool.
  7. Click on OK.
  8. Close the Registry Editor.
    Network Restricted
    Change Ndu Value to 4
  9. Restart your computer. When your computer boots up, you should see that System Host: Local System (Network Restricted) is no longer using a massive amount of your CPU and/or Disk.

3. Running the System File Checker

System File Checker (SFC) is an in-built tool which downloads a manifest of all the essential files from the internet and compares them to the version present in your computer. If it finds any discrepancies, it will automatically download the latest version from the internet and replace it. Running SFC might resolve the high CPU if there is an issue with your system files.

  1. Open the Start menu and type ‘cmd’. Right-click on the Command Prompt icon and click on ‘Run as Administrator’.
    Running Command Prompt as an administrator
  2. Accept the UAC prompt when it comes up.
  3. In the command prompt, type the “sfc /scannow” and press enter.
    SFC Command
  4. Wait for the scan to complete and perform a fix as well. If it’s successful, you’ll see the response ‘Windows Resource Protection found corrupt files and successfully repaired them. Details are included in the CBS.Log. It can be found at
    %WinDir%\Logs\CBS\CBS.log.’
  5. Enter the command
    dism /Online /Cleanup-Image /RestoreHealth.
    Run DISM Command
  6. After this command finishes running, monitor your CPU and Memory load and then check if the issue still exists.

4. Killing SVChost

Killing the Service Host (SVChost) process in the Task Manager solves this issue. After this, try to download your pending updates with an unmetered Wi-Fi connection.

  1. Press Ctrl + Shift + Del to launch the Windows Task Manager. You can also right-click on the taskbar and select Task Manager.

    Open Task Manager
  2. Click on More details to expand the manager. This reveals all the running processes.
  3. Search through the process for “Service Host: Local System”. This process hosts Windows Update and the Update Orchestrator Service. Select on this task and click End task.
    End Process of Service Host: Local System
  4. When the confirmation dialog shows up, click on the checkbox of Abandon unsaved data and shut down and click the Shutdown.
  5. Monitor the CPU load and check if the issue has been solved.

5. Performing a Clean Boot

In some cases, a third-party application or service might be causing High Cpu usage. Therefore, in this step, we will be disabling all non-essential services and applications at startup i.e. clean boot the system. You have to find what application/driver is causing the issue but the following applications are known to create the problem you are facing.

  • Virtual Disc App
  • Dragon Naturally Speaking
  • MST Command Center
  • VPN Chrome Extensions
  • HP Related Processes especially HP Help

To clean boot your system:

  1. Log in to the computer with an Administrator account.
  2. Press “Windows” + “R” to open up the “RUN” prompt.
    Opening Run Prompt
  3. Type in “msconfig” and pressEnter“.
    Running MSCONFIG
  4. Click on the “Services” option and uncheck the “Hide all Microsoft Services” button.
    Clicking on the “Services” tab and Un-checking the “hide all Microsoft Services” option
  5. Click on the “Disable All” option and then on “OK“.
    Clicking on the “Disable All” option
  6. Click on the “Startup” tab and click on the “Open Task Manager” option.
    Clicking on the “Open Task Manager” option
  7. Click on the “Startup” button in the task manager.
  8. Click on any application in the list that has “Enabled” written next to it and select the “Disable” option.
    Clicking on the “Startup” tab and selecting an application listed there
  9. Repeat this process for all applications in the list and restart your computer.
  10. Now your computer has been booted in the “Clean Boot” state.
  11. Check to see if the issue goes away.
  12. If the error isn’t encountered anymore, start enabling the services one by one and identify the service by enabling which the error comes back.
  13. Either, reinstall the service or keep it disabled.

6. Disable Windows Update Delivery Optimization

Windows update uses delivery optimization to speed up processes. But this delivery optimization can be stuck in operation and cause the High CPU Usage by Service Host. In that case, turning off delivery optimization may solve the problem. You might notice some effect in the speed and in particular, the optimization of Windows update but it is a fair trade-off to remove the high CPU usage.

  1. Click on the Windows button and type Windows Update. Now in the resulting list, click on Windows Update Settings.
    Open Windows Update Settings
  2. Now click on Advanced options.
    Open Advanced Options of Windows Update
  3. Now click on Delivery Optimization.
    Open Delivery Optimization
  4. Now toggle the switch of Allow Download from other PCs to off.
    Turn Off Allow Downloads from other PCs
  5. Now restart your system and check if the problem is solved.

7. Restarting Windows Update services

If the methods shown above haven’t helped you, it’s possible that your Windows Update is stuck doing an update which can lead to high CPU and Disk Usage spikes. Follow these steps below:-

  1. Search for Command Prompt and click “run as administrator”.
  2. Now type the following commands one by one:-
    net stop bits
    net stop wuauserv
    net stop appidsvc
    net stop cryptsvc
    ren %systemroot%\SoftwareDistribution SoftwareDistribution.bak
    ren %systemroot%\system32\catroot2 catroot2.bak
    net start wuauserv
    net start bits
    net start appidsvc
    net start cryptsvc
  3. Check to see if the usage is stable now.

If nothing has helped you so far, then run the chkdsk command to fix any issues with the system’s hard drive.

ABOUT THE AUTHOR

Kamil Anwar


Kamil is a certified MCITP, CCNA (W), CCNA (S) and a former British Computer Society Member with over 9 years of experience Configuring, Deploying and Managing Switches, Firewalls and Domain Controllers also an old-school still active on FreeNode.

Comments

38
    MA
    Muhammad Afzal Oct 3, 2016

    Disable the windows event log service to get rid of this problem.

    Reply
    SY
    Sidharth Yatish Nov 6, 2016

    The problem was because of the windows update service. Each update is around 1 GB in size that keeps downloading in the background. All those related services caused the leak. I set my WiFi as metered network and surprisingly got rid of the problem (at least temporarily). Waiting for a permanent fix.

    Reply
    KA
    K. Arrows Author Mar 26, 2017

    Welcome.

    JM
    Jason Madrid May 11, 2017

    I had the same problem and came to the same solution thank you soo much !!

      KA
      K. Arrows Author May 15, 2017

      Thank you for letting us know.

    AT
    Alberto Torres Jun 1, 2017

    Yo got it!! I got more than I was looking! Big thanks

      KA
      K. Arrows Author Jun 4, 2017

      thanks

    ZN
    Zeyad Nabulsi Jun 14, 2017

    Hi thanks for this. I had this issue and disable Superfetch. It worked great, for a atime. Now the same issue is happening but with Disk at 99-100% constantly. Service Host: Local System (16-17) seems to be the biggest offender but I can’t seem to find anything about it. I’ve changed my Chrome and Skype settings as well as a few others but no options have lowered the Disk usage permanently. Any ideas?

    EA
    Eclectic Art Jul 5, 2017

    Is there a free program?

      KA
      K. Arrows Author Jul 14, 2017

      Just use the instructions (manual) that should help.

        EA
        Eclectic Art Jul 14, 2017

        Its safe just to disable the superfetch?

          KA
          K. Arrows Author Jul 14, 2017

          Correct.

    MA
    Mayur Aug 1, 2017

    What did you do to reduce the disk usage?

    AR
    Artturi Aug 11, 2017

    My problem was caused by external usb audio interface, system host raised my cpu usage to 95%. After updating drivers the problem disappeared.

    Reply
      LE
      LeDanielH Sep 9, 2017

      Thanks for the tip, worked for me.

    RM
    Rahil Shaikh Mohammad Nov 4, 2017

    what about the high bandwidth usage. how to solve that.Also how do I shut down cortana.
    Seriously,like y microsoft y.No control at all at the user side.Again an update will come and again everything will be reset.this just gets worse n worse

    RM
    Rahil Shaikh Mohammad Nov 4, 2017

    when I do abandon unsaved data and shutdown,the service host windows event log and many other services come up,and then again service host local system starts.Not helping.

    MI
    Mike Dec 7, 2017

    Thanks, good stuff here

    MI
    Mike Dec 7, 2017

    Good stuff here. Thanks

    JM
    Jillian Marohnic Jan 19, 2018

    I tried Method 4 (killing Service Host: Local System, then checking “Abandon unsaved data and shut down”) because it seemed easiest. It worked great! Thank you so much! I was having trouble even just logging in and saving files. Now disk usage is totally under control.

      MA
      Mayank Mar 19, 2018

      This seems weird. After step 4, won’t the system shut down, and How will you monitor. On Re-starting, it will be the same. Correct me, if I am wrong.
      Also, using solution 3 did not work for me, as the system checker was not able to start.

    IG
    Ittech Gyan Mar 25, 2018

    I am also facing the same problem, but thanks to you to share the great article. I follow these instructions step-by-step and found that it works for me. Thanks again. https://www.itechgyan.com/service-host-superfetch-high-cpu/

    SN
    Somdutta Nath Apr 15, 2018

    Superfetch worked for me …no need to restart also …from 95% it went to 1%-2%
    Thank you

    Reply
    JO
    joedaddy Jun 3, 2018

    another quick way to fix.. Reset the Windows Defender Firewall to the default settings.

    To do this open
    Settings -> Update and Security -> Windows Defender -> Open Windows Defender Security Center -> Firewall and Network Protection -> Restore Firewall default settings

    Reply
    KR
    Kyle Ross Jun 25, 2018

    I uninstalled the Razer Surround application and the issue immediately went away.

    Reply
      DE
      Deus Jun 29, 2018

      THANK YOU, nothing else i tried worked, i had JUST formatted my computer and you just reminded me that everything was fine until i had to install the razer surround application for the sound drivers..
      as soon as i deleted that CPU dropped from 94% to 14%.

      Reply
      KA
      Kaneboy Sep 1, 2018

      ty

    BO
    boone Jul 30, 2018

    So, change the NDU->start to 4 and went to restart and now the puter is hung up on the Lenovo screen.

      KA
      Kamil Anwar Aug 6, 2018

      What’s the make/model of your Lenovo? There should be an option restore to Factory settings.

        BO
        boone Aug 6, 2018

        I have the y510p and I ended up getting it figured out, it didn’t like that sd card that was in it at the time, pulled that out and it fired right up

          KA
          Kamil Anwar Aug 6, 2018

          Perfect. Did not assume you had that in, can also happen if any of the external usb ports are utilized

          BO
          boone Aug 6, 2018

          Good to know! I have had other sd cards and have my external hooked up all the time and never had an issue the last 4 years, took me by surprise!

    LO
    LordDelacroix May 15, 2019

    Razer strikes again!

    SW
    Shane Warren Author Sep 30, 2019

    First of all, the article was updated to include more solutions. Secondly, which step 4 are you talking about? in which solution? if you are saying that by stopping the SVCHost it might malfunction then it won’t.

    RG
    RealBlackshot Gamer Dec 12, 2019

    can anyone help me with this?I have no idea what happen to my comp. https://uploads.disquscdn.c

      SW
      Shane Warren Author Dec 12, 2019

      It’s not using many resources, I’d tell you to let it run as it is running important Windows’ services.

    KD
    Keeplungart D Dec 19, 2019

    Hallelujah, thanks for this. I disabled the Windows Update and the Update Orchestrator Service and it went down to 5%. Thanks so much for this.

    Reply
    GI
    Gideons Feb 8, 2021

    Thank you