Windows Update Error 0x80070005 Fix

Updated March 11, 2026 • Expert Guide • Prime AI Tech Solutions

Looking for the best solutions? Compare top options and get expert advice tailored to your needs.

Explore Top Recommendations ›

Windows Update Error 0x80070005 Fix: An Expert's Comprehensive Guide

As an expert in Windows system diagnostics and repair, I frequently encounter the dreaded Windows Update Error 0x80070005. This particular error, often accompanied by the message "Access Denied," is a significant roadblock for users attempting to keep their systems secure and up-to-date. While frustrating, it is, in most cases, a solvable problem rooted in specific system permission issues or corrupted update components. This article provides an exhaustive, step-by-step guide to not only diagnose and fix this error but also to understand its underlying causes and prevent its recurrence.

Maintaining a current Windows operating system is paramount for security, stability, and access to the latest features. When updates fail with a persistent error like 0x80070005, it leaves your system vulnerable and can lead to further complications. My aim here is to equip you with the knowledge and tools necessary to resolve this issue confidently, transforming a complex technical challenge into a manageable task.

Understanding Error 0x80070005: "Access Denied"

The error code 0x80070005, also known as "ACCESS_DENIED," is a generic permission error. In the context of Windows Update, it specifically means that the Windows Update service or a related component lacks the necessary permissions to access, modify, or write to certain files or directories required for the update process. This can happen during the download, installation, or configuration phases of an update. Essentially, the system is trying to perform an action, but its access to a critical resource has been blocked or restricted.

Common scenarios where this error manifests include:

  • During direct update installation: When Windows Update tries to install a downloaded package.
  • When checking for updates: Less common, but can occur if the service cannot write temporary files.
  • After a feature update: When the system tries to finalize a major update installation.

Root Causes of Error 0x80070005

Understanding the root causes is crucial for effective troubleshooting. While "Access Denied" is the symptom, the underlying reasons can vary:

  1. Incorrect File System Permissions: This is by far the most common cause. Critical folders like C:\Windows\SoftwareDistribution, C:\Windows\System32\catroot2, or even parts of the Windows registry may have incorrect ownership or ACL (Access Control List) entries, preventing the update service from operating correctly.
  2. Corrupted System Files: Essential Windows system files can become corrupted, leading to the update process failing to execute commands or access resources.
  3. Third-Party Software Interference: Aggressive antivirus programs, firewalls, or other security software can sometimes mistakenly flag Windows Update processes as malicious, blocking their access to system resources.
  4. Malware Infection: Though less common now, certain types of malware can alter system permissions or corrupt files, leading to update failures.
  5. Group Policy Restrictions: In corporate environments, or sometimes due to misconfigured local security policies, certain update functionalities might be inadvertently restricted.
  6. Corrupted User Profile: Rarely, a damaged user profile can cause permission issues, especially if the update process tries to write user-specific temporary files.
Infographic illustrating the troubleshooting steps for Windows Update Error 0x80070005

Step-by-Step Guide to Fix Windows Update Error 0x80070005

Follow these steps systematically. Each step builds on the previous one, addressing the most common causes first.

1. Initial Checks & Basic Troubleshooting

  • Restart Your Computer: A simple reboot can often resolve temporary glitches.
  • Check Disk Space: Ensure you have sufficient free space (at least 15-20 GB) on your system drive (C:). Windows Updates require considerable space for temporary files and installation.
  • Verify Date and Time Settings: Incorrect system date/time can interfere with secure connections and update validation.

2. Run the Windows Update Troubleshooter

Windows has built-in troubleshooters designed to automatically detect and fix common update issues.

  1. Go to Settings > Update & Security (or System > Troubleshoot in Windows 11).
  2. Select Troubleshoot > Additional troubleshooters (or Other troubleshooters in Windows 11).
  3. Click on Windows Update and then Run the troubleshooter.
  4. Follow the on-screen instructions and apply any suggested fixes.

3. Check and Repair File System Permissions (Crucial Step)

This is often the direct solution for 0x80070005. We'll use the icacls command to reset permissions on critical directories.

  1. Open Command Prompt as Administrator. Search for "cmd", right-click, and select "Run as administrator".
  2. Execute the following commands one by one, pressing Enter after each:
    • net stop wuauserv (Stops Windows Update service)
    • net stop bits (Stops Background Intelligent Transfer Service)
    • net stop cryptSvc (Stops Cryptographic Services)
    • net stop msiserver (Stops Windows Installer service)
  3. Reset permissions for the SoftwareDistribution folder:
    • icacls C:\Windows\SoftwareDistribution /grant "NT SERVICE\Wuauserv":(F)
    • icacls C:\Windows\SoftwareDistribution /grant "NT SERVICE\TrustedInstaller":(F)
    • icacls C:\Windows\SoftwareDistribution /grant "SYSTEM":(F)
    • icacls C:\Windows\SoftwareDistribution /grant "Administrators":(F)
    • icacls C:\Windows\SoftwareDistribution /grant "Users":(RX)
  4. Reset permissions for the catroot2 folder:
    • icacls C:\Windows\System32\catroot2 /grant "NT SERVICE\Wuauserv":(F)
    • icacls C:\Windows\System32\catroot2 /grant "NT SERVICE\TrustedInstaller":(F)
    • icacls C:\Windows\System32\catroot2 /grant "SYSTEM":(F)
    • icacls C:\Windows\System32\catroot2 /grant "Administrators":(F)
    • icacls C:\Windows\System32\catroot2 /grant "Users":(RX)
  5. Restart the services:
    • net start wuauserv
    • net start bits
    • net start cryptSvc
    • net start msiserver
  6. Attempt to run Windows Update again.

Expert Note: The (F) permission grants Full control, and (RX) grants Read and Execute. These are standard permissions for these folders and services. If you encounter "Access Denied" errors during the icacls commands, ensure you are running Command Prompt as Administrator and consider booting into Safe Mode with Networking to perform these steps.

4. Reset Windows Update Components Manually

This step involves clearing the update cache and re-registering update components.

  1. Open Command Prompt as Administrator.
  2. Stop Windows Update services (same as Step 3):
    • net stop wuauserv
    • net stop bits
    • net stop cryptSvc
    • net stop msiserver
  3. Rename the SoftwareDistribution and catroot2 folders to clear the update cache:
    • ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
    • ren C:\Windows\System32\catroot2 catroot2.old
  4. Restart the services:
    • net start wuauserv
    • net start bits
    • net start cryptSvc
    • net start msiserver
  5. Try Windows Update again. New SoftwareDistribution and catroot2 folders will be created automatically.

5. Run System File Checker (SFC) and DISM

Corrupted system files can prevent updates from installing. SFC and DISM tools can repair these.

  1. Open Command Prompt as Administrator.
  2. Run SFC: sfc /scannow. Let it complete (this can take some time).
  3. If SFC finds errors it cannot fix, or if the issue persists, run DISM (Deployment Image Servicing and Management) commands:
    • DISM /Online /Cleanup-Image /CheckHealth
    • DISM /Online /Cleanup-Image /ScanHealth
    • DISM /Online /Cleanup-Image /RestoreHealth

    These commands use Windows Update to download necessary files for repair, so ensure you have an internet connection. The RestoreHealth command can take a long time to complete.

  4. After running these, restart your computer and try Windows Update.
Technical infographic showing data flow for Windows system file repair process

6. Temporarily Disable Third-Party Antivirus/Firewall

Aggressive security software can sometimes interfere with Windows Update processes.

  1. Temporarily disable your third-party antivirus and firewall. Refer to your software's documentation for instructions.
  2. Attempt to run Windows Update.
  3. Important: Re-enable your security software immediately after testing, regardless of the outcome, to maintain system protection.

Advanced Troubleshooting and Last Resorts

7. Check for Malware

Run a full scan with Windows Defender or a reputable third-party anti-malware tool to rule out malicious interference.

8. Manual Update Installation via Microsoft Update Catalog

If a specific update keeps failing, you can try to install it manually.

  1. Go to Settings > Update & Security > View update history. Note the KB number (e.g., KB1234567) of the failed update.
  2. Visit the Microsoft Update Catalog website.
  3. Search for the KB number.
  4. Download the correct version (32-bit or 64-bit) for your system.
  5. Run the downloaded .msu file to install the update.

9. Create a New User Profile

If