How to Fix '0x80070005 - Access is denied' Error During Windows Updates
The "0x80070005 - Access is denied" error is a common and frustrating issue that can prevent your Windows operating system from installing crucial updates. When this error occurs, users typically see a message within the Windows Update interface stating "Something went wrong. Try to reopen Settings later," accompanied by the specific error code 0x80070005. The update process will fail to download or install, often appearing stuck or simply reverting changes without completing the installation. This blockage not only prevents your system from receiving new features and performance improvements but also leaves it vulnerable to security threats that updated patches are designed to mitigate.
This specific error code almost universally points to a permissions issue. At its core, the 0x80070005 error means that the Windows Update service, or one of its dependent components, does not have the necessary access rights to certain files, folders, or registry keys required to perform an update operation. This often involves critical system directories like C:\Windows\SoftwareDistribution or C:\Windows\System32\catroot2, where update files are stored and processed, or temporary directories where the installer extracts files. Various factors can lead to these permission discrepancies, including corrupted system files, interference from third-party security software, malware infections, or even incorrect configurations within Windows services responsible for updates. Understanding that this is fundamentally an access rights problem helps in approaching the solution systematically.
Step-by-Step Solution
Solving the 0x80070005 error requires a methodical approach, addressing the most common causes first before moving to more advanced troubleshooting. Ensure you have administrator privileges on your system before proceeding with these steps.
## Step 1: Run the Windows Update Troubleshooter
The built-in Windows Update Troubleshooter is designed to diagnose and automatically fix common issues preventing updates. It's always the first step to take.
- Press
Windows key + Ito open Settings. - Navigate to Update & Security (Windows 10) or System > Troubleshoot > Other troubleshooters (Windows 11).
- Under "Get up and running" or "Most frequent," select Windows Update.
- Click Run the troubleshooter.
- Follow the on-screen prompts and apply any recommended fixes.
- Once the troubleshooter completes, restart your computer and try running Windows Update again.
## Step 2: Temporarily Disable Third-Party Security Software
Aggressive antivirus programs or firewalls can sometimes interfere with Windows Update processes by blocking access to system files or network connections.
- Locate your third-party antivirus software icon in the system tray (usually near the clock).
- Right-click the icon and look for options like "Disable," "Exit," or "Turn off protection." Choose to disable it temporarily for a short duration (e.g., 15-30 minutes, or until the next reboot).
- If you have a third-party firewall, disable that as well.
- With your security software temporarily disabled, attempt to run Windows Update.
- Important: Remember to re-enable your security software immediately after testing, regardless of the outcome, to maintain system protection.
## Step 3: Reset Windows Update Components Manually
This is often the most effective solution, as it clears out potentially corrupted update files and resets the services involved in the update process.
- Type
cmdinto the Windows search bar. Right-click on Command Prompt and select Run as administrator. - Stop the essential Windows Update services by typing the following commands, pressing
Enterafter each:net stop wuauserv net stop cryptSvc net stop bits net stop msiserver - Rename the
SoftwareDistributionandCatroot2folders. These folders store temporary update files and update history. Renaming them forces Windows to recreate them. Type the following commands, pressingEnterafter each:ren C:\Windows\SoftwareDistribution SoftwareDistribution.old ren C:\Windows\System32\catroot2 catroot2.old - Restart the services you stopped earlier. Type the following commands, pressing
Enterafter each:net start wuauserv net start cryptSvc net start bits net start msiserver - Close Command Prompt and restart your computer.
- Attempt to run Windows Update again.
## Step 4: Run System File Checker (SFC) and DISM Commands
Corrupted system files can lead to permission issues for Windows services. SFC and DISM tools help identify and repair such corruption.
- Type
cmdinto the Windows search bar. Right-click on Command Prompt and select Run as administrator. - First, run the System File Checker (SFC) by typing:
Presssfc /scannowEnter. This process may take some time. Do not close the window until it completes and displays a message. - After SFC completes, run the Deployment Imaging and Servicing Management (DISM) tool. This tool helps fix more profound system image corruption that SFC might not address. Type the following commands, pressing
Enterafter each:
Each DISM command can take several minutes to complete. TheDISM /Online /Cleanup-Image /CheckHealth DISM /Online /Cleanup-Image /ScanHealth DISM /Online /Cleanup-Image /RestoreHealthRestoreHealthcommand is particularly important, as it attempts to repair any detected issues. - Once all commands have finished, close Command Prompt, restart your computer, and try Windows Update.
## Step 5: Verify and Adjust Permissions for Critical Folders
Incorrect permissions on specific folders where Windows Update operates can directly cause the 0x80070005 error. Ensuring the SYSTEM account has full control is crucial.
- Open File Explorer.
- Navigate to
C:\Windows. - Locate the
SoftwareDistributionfolder, right-click it, and select Properties. - Go to the Security tab and click Edit....
- Click Add..., type
SYSTEMinto the "Enter the object names to select" field, and click Check Names. Then click OK. - Ensure that
SYSTEMis selected in the "Group or user names" list. In the "Permissions for SYSTEM" box below, check the Full Control checkbox under "Allow." - Click Apply then OK.
- Repeat this process for the
C:\Windows\System32\catroot2folder. - Also, check permissions for
C:\Windows\Temp. Ensure theSYSTEMaccount has Full Control here as well. If it doesn't, grant it. - Restart your computer and attempt to run Windows Update.
## Step 6: Perform a Clean Boot
A clean boot helps eliminate software conflicts by starting Windows with a minimal set of drivers and startup programs. This can pinpoint if a third-party application is causing the permissions issue.
- Press
Windows key + R, typemsconfig, and pressEnterto open System Configuration. - Go to the Services tab.
- Check the box next to Hide all Microsoft services.
- Click Disable all.
- Go to the Startup tab and click Open Task Manager.
- In Task Manager, go to the Startup tab. Select each item individually and click Disable.
- Close Task Manager.
- Back in the System Configuration window, click Apply and then OK.
- You will be prompted to restart your computer. Choose Restart.
- After the clean boot, try running Windows Update. If the update succeeds, a third-party program was the culprit. You can then re-enable services and startup items one by one to find the specific conflicting software.
- To return to a normal startup, reverse the steps: go to
msconfig, select "Normal startup" on the General tab, and re-enable services and startup items.
## Step 7: Create a New User Account
In rare cases, the user profile itself might be corrupted, leading to permissions issues even for system-level operations. Creating a new administrative user account can rule this out.
- Press
Windows key + Ito open Settings. - Navigate to Accounts > Family & other users (Windows 10) or Accounts > Other users (Windows 11).
- Click Add someone else to this PC.
- Follow the prompts to create a new local user account (you can choose "I don't have this person's sign-in information" and "Add a user without a Microsoft account").
- Once the account is created, click on the new account, select Change account type, and set it to Administrator.
- Log out of your current user account and log in with the newly created administrative account.
- Attempt to run Windows Update from this new account. If it works, your original user profile might be corrupted, and you may consider migrating your data to the new profile.
Common Mistakes
When troubleshooting the 0x80070005 error, users often make several common mistakes that can prolong the issue or even exacerbate it. One frequent error is neglecting to run Command Prompt or PowerShell as an administrator. Many of the crucial commands, such as net stop, ren, sfc, and DISM, require elevated permissions, and failing to execute them as an administrator will result in a different "Access is denied" message for the command itself, rendering the step ineffective.
Another common pitfall is giving up after the first or second troubleshooting step fails. The 0x80070005 error can have multiple underlying causes, and a systematic approach is essential. Skipping steps, particularly the manual reset of Windows Update components (Step 3) or the SFC/DISM scans (Step 4), often means missing the core problem. Lastly, some users forget to re-enable their third-party security software after temporarily disabling it for testing, leaving their system vulnerable. Always ensure your antivirus and firewall are active once troubleshooting is complete.
Prevention Tips
Preventing the 0x80070005 error largely involves maintaining a healthy and secure Windows environment. Regularly ensuring your system files are intact is a crucial preventative measure; consider running sfc /scannow and DISM /Online /Cleanup-Image /RestoreHealth commands periodically (e.g., once a month) to proactively detect and repair corruption before it causes update issues. Keeping your operating system and all installed software up to date also minimizes vulnerabilities that could be exploited to manipulate system permissions.
Furthermore, always use reputable antivirus and anti-malware software, and perform regular scans to detect and remove any malicious software that might interfere with system processes or alter critical permissions. Avoid installing unverified third-party "optimization" or "cleaning" tools, as these can sometimes incorrectly modify registry entries or file permissions, leading to unexpected errors like 0x80070005. Finally, ensure you have sufficient free disk space, as inadequate space can sometimes cause update failures, although this is less directly related to permission issues, it can compound problems.