IT technician troubleshooting Windows Update error on laptop computer
0x80070005Windows UpdateWindows

Fix Windows Update Error 0x80070005 – Access Denied 2026

Windows Update error 0x80070005 indicates insufficient permissions or corrupted system files preventing update installation. This comprehensive guide provides proven solutions to restore update functionality.

Emanuel DE ALMEIDAEmanuel DE ALMEIDA
10 Mar 20268 min read3 views
Error Code0x80070005
ProductWindows Update
KB ArticleKB5034441
Solutions5 methods
Sources2 official
Affected SystemsWindows 10, Windows 11
Quick Fix

Run Windows Update Troubleshooter from SettingsSystemTroubleshootOther troubleshootersWindows Update. If that fails, run sfc /scannow in an elevated Command Prompt to repair system files.

Symptoms

  • Windows Update fails with error code 0x80070005
  • "Access is denied" message appears during update installation
  • Updates download but fail to install
  • Windows Update service stops responding
  • System shows "Some settings are managed by your organization" when not domain-joined

Possible Causes

  • Insufficient user permissions for Windows Update components
  • Corrupted Windows Update service files or registry entries
  • Antivirus software blocking update processes
  • Damaged system files preventing proper update installation
  • Group Policy restrictions interfering with update mechanisms
  • Windows Update cache corruption in SoftwareDistribution folder
1

Run Windows Update Troubleshooter

Microsoft's built-in troubleshooter automatically detects and fixes common Windows Update issues including permission problems.

  1. Press Windows + I to open Settings
  2. Navigate to SystemTroubleshootOther troubleshooters
  3. Locate Windows Update and click Run
  4. Allow the troubleshooter to scan for issues (this takes 2-5 minutes)
  5. Follow any recommended actions presented by the troubleshooter
  6. Restart your computer when prompted

Verification: Open SettingsWindows Update and click Check for updates. The error should no longer appear.

2

Reset Windows Update Components

This method stops Windows Update services, clears the update cache, and restarts services with proper permissions.

Warning: Run Command Prompt as Administrator for all commands below.
  1. Press Windows + X and select Terminal (Admin)
  2. Stop Windows Update services by running these commands:
net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
  1. Rename the SoftwareDistribution and catroot2 folders:
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old
  1. Restart the Windows Update services:
net start wuauserv
net start cryptSvc
net start bits
net start msiserver
  1. Close Command Prompt and restart your computer

Verification: Check Windows Update again. The system will recreate the folders and download fresh update metadata.

3

Run System File Checker and DISM

Corrupted system files often cause permission errors. SFC and DISM repair these files using Windows component store.

  1. Open Terminal (Admin) from the Windows + X menu
  2. Run System File Checker to scan for corrupted files:
sfc /scannow
  1. Wait for the scan to complete (15-30 minutes). If SFC finds issues, run DISM to repair the component store:
DISM /Online /Cleanup-Image /RestoreHealth
  1. After DISM completes, run SFC again to ensure all files are repaired:
sfc /scannow
  1. Restart your computer and test Windows Update
Pro tip: Check the CBS.log file at C:\Windows\Logs\CBS\CBS.log for detailed information about what SFC repaired.

Verification: Run sfc /verifyonly to confirm system integrity, then check Windows Update functionality.

4

Fix Registry Permissions and Group Policy

Incorrect registry permissions or Group Policy settings can block Windows Update access. This method resets these configurations.

Warning: Back up your registry before making changes. Press Windows + R, type regedit, then File → Export.
  1. Press Windows + R, type gpedit.msc, and press Enter
  2. Navigate to Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows Update
  3. Double-click Configure Automatic Updates and set it to Not Configured
  4. Repeat for Specify intranet Microsoft update service location and Remove access to use all Windows Update features
  5. Close Group Policy Editor and open Terminal (Admin)
  6. Reset Windows Update registry permissions:
takeown /f C:\Windows\SoftwareDistribution /r /d y
icacls C:\Windows\SoftwareDistribution /grant administrators:F /t
  1. Force Group Policy update:
gpupdate /force
  1. Restart your computer

Verification: Check if the "Some settings are managed by your organization" message disappears from Windows Update settings.

5

Recreate Windows Update Database

When other methods fail, completely rebuilding the Windows Update database often resolves persistent 0x80070005 errors.

  1. Boot into Safe Mode: Hold Shift while clicking Restart, then TroubleshootAdvanced optionsStartup SettingsRestart → Press 4
  2. Open Terminal (Admin) in Safe Mode
  3. Stop all Windows Update related services:
net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
net stop dosvc
  1. Delete the Windows Update database and cache:
del /f /s /q C:\Windows\SoftwareDistribution\*.*
rmdir /s /q C:\Windows\SoftwareDistribution
rmdir /s /q C:\Windows\System32\catroot2
  1. Re-register Windows Update DLL files:
regsvr32 wuapi.dll
regsvr32 wuaueng.dll
regsvr32 wuaueng1.dll
regsvr32 wucltui.dll
regsvr32 wups.dll
regsvr32 wups2.dll
regsvr32 wuweb.dll
  1. Restart services and reboot normally:
net start wuauserv
net start cryptSvc
net start bits
net start msiserver
  1. Restart your computer normally

Verification: Windows will rebuild the update database on first check. This process may take 10-15 minutes.

Verification

After applying any solution method, verify the fix by opening SettingsWindows Update and clicking Check for updates. The system should begin checking without displaying error 0x80070005. Additionally, run Get-WindowsUpdateLog in PowerShell to generate a readable update log at C:\Users\%USERNAME%\Desktop\WindowsUpdate.log and confirm no access denied errors appear in recent entries.

Still Having Issues?

If the above methods didn't resolve error 0x80070005, try these advanced alternatives: Create a new local administrator account and test Windows Update from that profile to isolate user-specific permission issues. Run sfc /scannow from Windows Recovery Environment if system file corruption persists. Check antivirus logs for blocked Windows Update processes and temporarily disable real-time protection during updates. For enterprise environments, verify that Windows Update for Business policies aren't conflicting with local update attempts. As a last resort, consider using the Windows 11 Media Creation Tool to perform an in-place upgrade repair, which preserves files while refreshing system components.

Frequently Asked Questions

What does Windows Update error 0x80070005 mean exactly?
Error 0x80070005 translates to "Access Denied" in Windows error codes. It occurs when Windows Update lacks sufficient permissions to access system files, registry keys, or folders required for update installation. This can happen due to corrupted permissions, antivirus interference, or damaged system files that prevent the update service from functioning properly.
Why does this error happen more frequently on Windows 11 than Windows 10?
Windows 11 implements stricter security controls and enhanced permission models compared to Windows 10. The Trusted Platform Module (TPM) requirements and Secure Boot enforcement can sometimes conflict with update processes, especially on systems upgraded from Windows 10. Additionally, Windows 11's more aggressive User Account Control (UAC) settings can block legitimate update operations that worked fine on Windows 10.
Can antivirus software cause Windows Update error 0x80070005?
Yes, antivirus software frequently causes this error by blocking Windows Update processes that it perceives as suspicious system modifications. Real-time protection features may quarantine update files or prevent the Windows Update service from accessing necessary system directories. Temporarily disabling antivirus protection during updates often resolves the issue, but ensure you re-enable protection afterward.
Is it safe to delete the SoftwareDistribution folder to fix this error?
Yes, deleting or renaming the SoftwareDistribution folder is safe and a standard Microsoft-recommended troubleshooting step. This folder contains Windows Update cache and temporary files that Windows automatically recreates. However, you'll lose update history and may need to re-download previously downloaded updates. Always stop Windows Update services before modifying this folder to prevent file corruption.
How can I prevent Windows Update error 0x80070005 from recurring?
Prevent recurrence by keeping antivirus definitions updated to avoid false positives, running monthly SFC scans to catch file corruption early, ensuring your user account has proper administrator privileges, avoiding third-party system optimization tools that modify Windows Update components, and keeping Group Policy settings at default unless specifically required for your environment. Regular system maintenance significantly reduces the likelihood of permission-related update errors.

Which method worked?

Vote to help others

Official Resources

1
2

About the Author

Emanuel DE ALMEIDA

Emanuel DE ALMEIDA

Senior IT Journalist & Cloud Architect

Microsoft MCSA-certified Cloud Architect | Fortinet-focused. I modernize cloud, hybrid & on-prem infrastructure for reliability, security, performance and cost control - sharing field-tested ops & troubleshooting.

Discussion

Share your thoughts and insights

You must be logged in to comment.

Loading comments...