How to Resolve Windows Update Error 0x80070005: Access Denied
Problem Explanation
Users attempting to download and install updates for their Windows operating system may encounter the frustrating error code 0x80070005, often accompanied by the message "Access Denied." This error prevents the Windows Update service from accessing necessary files or locations on the system, thereby halting the update process entirely. When this occurs, Windows Update might display a message stating that updates could not be installed and provide the specific error code 0x80070005. This roadblock can leave your system vulnerable to security threats and prevent you from benefiting from new features and performance improvements.
Why It Happens
The core reason behind Windows Update error 0x80070005 is a permissions issue. The Windows Update service, which runs with specific system privileges, is unable to gain the necessary access to folders or files that it needs to download, extract, or install update components. This lack of access can stem from several underlying causes. Most commonly, it is due to incorrect file permissions on critical system folders, such as the Software Distribution folder, where update files are temporarily stored. Additionally, third-party security software, such as antivirus or firewall programs, might be overly aggressive and inadvertently block the Windows Update service from accessing its required resources. In rarer cases, a corrupted system file or an issue with the Windows Update service itself can also lead to this access denial.
Step-by-Step Solution
Here’s a comprehensive approach to resolving the Windows Update error 0x80070005:
Step 1: Run the Windows Update Troubleshooter
The built-in Windows Update Troubleshooter is designed to automatically detect and fix common Windows Update problems.
- Press the Windows key + I to open Settings.
- Navigate to Update & Security (or System > Troubleshoot on Windows 11).
- Click on Troubleshoot in the left-hand pane.
- Select Additional troubleshooters.
- Find Windows Update and click on Run the troubleshooter.
- Follow the on-screen prompts and allow the troubleshooter to make any necessary changes.
- Restart your computer after the troubleshooter has completed its scan and attempted repairs.
Step 2: Check and Correct File Permissions for the SoftwareDistribution Folder
Incorrect permissions on the SoftwareDistribution folder are a frequent culprit.
- Open Command Prompt as an administrator. To do this, search for "cmd" in the Start menu, right-click on "Command Prompt," and select "Run as administrator."
- Stop the Windows Update service by typing the following command and pressing Enter:
net stop wuauserv - Stop the Cryptographic Services by typing the following command and pressing Enter:
net stop cryptSvc - Stop the BITS (Background Intelligent Transfer Service) by typing the following command and pressing Enter:
net stop bits - Close Command Prompt.
- Open File Explorer and navigate to
C:\Windows\. - Locate the SoftwareDistribution folder.
- Right-click on the SoftwareDistribution folder and select Properties.
- Go to the Security tab and click Edit.
- In the new window, select Users from the list of Group or user names.
- Ensure that the Full control checkbox under "Allow" is checked for Users. If it's not, check it.
- Click Apply and then OK on all open windows.
- Reopen Command Prompt as an administrator.
- Restart the Windows Update service by typing:
net start wuauserv - Restart the Cryptographic Services by typing:
net start cryptSvc - Restart the BITS service by typing:
net start bits - Close Command Prompt and try running Windows Update again.
Step 3: Temporarily Disable Antivirus and Firewall Software
Security software can sometimes interfere with Windows Update.
- Locate your antivirus program's icon in the system tray (near the clock).
- Right-click on the icon and look for an option to disable protection or exit the program. Select an option that will temporarily disable it.
- If you are using Windows Firewall, you can temporarily disable it by searching for "Windows Defender Firewall" in the Start menu, clicking "Turn Windows Defender Firewall on or off," and then selecting "Turn off Windows Defender Firewall" for both private and public network settings.
- Attempt to run Windows Update.
- Crucially, re-enable your antivirus and firewall immediately after the update attempt.
Step 4: Re-register DLL Files Related to Windows Update
Corrupted or incorrectly registered DLL files can cause access issues.
- Open Command Prompt as an administrator.
- Type the following commands, pressing Enter after each one:
regsvr32 mshtml.dll regsvr32 shdocvw.dll regsvr32 browseui.dll regsvr32 vbscript.dll regsvr32 scrrun.dll regsvr32 msxml.dll regsvr32 msxml3.dll regsvr32 msxml6.dll regsvr32 jscript.dll regsvr32 urlmon.dll regsvr32 wintrust.dll regsvr32 dssenh.dll regsvr32 cryptdlg.dll regsvr32 initpki.dll regsvr32 rsaenh.dll regsvr32 gpkcsp.dll regsvr32 sccbase.dll regsvr32 slid.dll regsvr32 es.dll - After successfully re-registering all DLLs (you should see a confirmation message for each), restart your computer.
Step 5: Reset Windows Update Components
This is a more advanced step that involves stopping services, renaming specific folders, and then restarting services.
- Open Command Prompt as an administrator.
- Stop the necessary services:
net stop wuauserv net stop cryptSvc net stop bits net stop msiserver - Rename the SoftwareDistribution and catroot2 folders:
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old ren C:\Windows\System32\catroot2 catroot2.old - Restart the services:
net start wuauserv net start cryptSvc net start bits net start msiserver - Close Command Prompt and restart your computer.
- After restarting, try running Windows Update. If it works, you can delete the
.oldfolders fromC:\Windows\to reclaim disk space.
Step 6: Run System File Checker (SFC) and DISM Tools
Corrupted system files can also lead to permission errors.
- Open Command Prompt as an administrator.
- Run the System File Checker (SFC) tool by typing:
Let this process complete.sfc /scannow - If SFC finds and fixes errors, restart your computer and try Windows Update. If SFC cannot fix the issues or if the problem persists, run the Deployment Image Servicing and Management (DISM) tool.
- Run the DISM tool by typing the following commands, pressing Enter after each:
This process can take a significant amount of time.DISM /Online /Cleanup-Image /ScanHealth DISM /Online /Cleanup-Image /CheckHealth DISM /Online /Cleanup-Image /RestoreHealth - Once DISM has completed, restart your computer and try Windows Update again.
Common Mistakes
A frequent mistake when encountering error 0x80070005 is attempting to manually change permissions on too many system files or folders unnecessarily. This can inadvertently create new, more complex permission issues. Another common pitfall is forgetting to re-enable antivirus and firewall software after temporarily disabling them. Leaving these security measures off can expose your system to threats. Users also sometimes skip the step of running Command Prompt or PowerShell as an administrator, which is essential for the commands to execute correctly and make the necessary system changes. Finally, not restarting the computer after performing significant troubleshooting steps can prevent the changes from taking effect.
Prevention Tips
To minimize the chances of encountering Windows Update error 0x80070005 in the future, it's crucial to maintain a healthy system. Regularly running the Windows Update Troubleshooter, even when you aren't experiencing issues, can help catch potential problems early. Ensure your antivirus and firewall software are configured to allow legitimate system processes, such as Windows Update, to run without undue restriction. Keep your system’s user account control (UAC) settings at their default levels, as significant modifications can sometimes impact permissions. Periodically running SFC and DISM scans can help identify and repair corrupted system files before they contribute to update errors. Lastly, always ensure you have enough free disk space on your system drive, as low disk space can sometimes interfere with the update download and installation process.