Fix Windows Update Error 0x80070005 – Access Denied 2026

Windows 11 and Windows 10 include a built-in troubleshooter that can automatically detect and fix common update issues including permission problems.

1. Press Windows + I to open Settings
2. Navigate to System → Troubleshoot → Other troubleshooters
3. Locate Windows Update and click Run
4. Wait for the troubleshooter to scan and detect issues
5. Follow any recommended actions presented by the troubleshooter
6. Restart your computer when prompted
7. Test Windows Update by checking for updates manually

Verification: Open Settings → Windows Update and click Check for updates. The error should no longer appear.

This method manually resets all Windows Update components and clears the update cache, which often resolves permission-related issues.

1. Press Windows + X and select Windows Terminal (Admin)
2. Stop Windows Update services by running these commands:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver

3. Rename the SoftwareDistribution and catroot2 folders:

ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old

4. Restart the Windows Update services:

net start wuauserv
net start cryptSvc
net start bits
net start msiserver

5. Close the command prompt and restart your computer
6. Check for Windows Updates to test the fix

Verification: Run Get-Service wuauserv,cryptsvc,bits,msiserver in PowerShell to confirm all services are running.

Corrupted system files can cause permission errors during Windows Updates. SFC and DISM tools repair these files and restore proper system integrity.

1. Open Windows Terminal (Admin) from the Start menu
2. Run System File Checker to scan and repair corrupted files:

sfc /scannow

3. Wait for the scan to complete (this may take 15-30 minutes)
4. Run DISM to repair the Windows image:

DISM /Online /Cleanup-Image /RestoreHealth

5. After DISM completes, run SFC again to ensure all issues are resolved:

sfc /scannow

6. Restart your computer and test Windows Update

Verification: Check the SFC log at C:\Windows\Logs\CBS\CBS.log for "Windows Resource Protection did not find any integrity violations" message.

This method manually resets file and registry permissions for Windows Update components, addressing the core cause of access denied errors.

1. Download and run the Windows Update Reset PowerShell script or manually reset permissions
2. Open Windows Terminal (Admin)
3. Reset permissions on the SoftwareDistribution folder:

takeown /f C:\Windows\SoftwareDistribution /r /d y
icacls C:\Windows\SoftwareDistribution /grant administrators:F /t

4. Reset permissions on the Windows Update registry keys:

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v "DisableWindowsUpdateAccess" /t REG_DWORD /d 0 /f

5. Reset the Windows Update Agent by running:

regsvr32 /s atl.dll
regsvr32 /s urlmon.dll
regsvr32 /s mshtml.dll
regsvr32 /s shdocvw.dll
regsvr32 /s browseui.dll
regsvr32 /s jscript.dll
regsvr32 /s vbscript.dll
regsvr32 /s scrrun.dll
regsvr32 /s msxml.dll
regsvr32 /s msxml3.dll
regsvr32 /s msxml6.dll
regsvr32 /s actxprxy.dll
regsvr32 /s softpub.dll
regsvr32 /s wintrust.dll
regsvr32 /s dssenh.dll
regsvr32 /s rsaenh.dll
regsvr32 /s gpkcsp.dll
regsvr32 /s sccbase.dll
regsvr32 /s slbcsp.dll
regsvr32 /s cryptdlg.dll
regsvr32 /s oleaut32.dll
regsvr32 /s ole32.dll
regsvr32 /s shell32.dll
regsvr32 /s initpki.dll
regsvr32 /s wuapi.dll
regsvr32 /s wuaueng.dll
regsvr32 /s wuaueng1.dll
regsvr32 /s wucltui.dll
regsvr32 /s wups.dll
regsvr32 /s wups2.dll
regsvr32 /s wuweb.dll
regsvr32 /s qmgr.dll
regsvr32 /s qmgrprxy.dll
regsvr32 /s wucltux.dll
regsvr32 /s muweb.dll
regsvr32 /s wuwebv.dll

6. Restart the computer and test Windows Update

Verification: Check folder permissions by right-clicking C:\Windows\SoftwareDistribution → Properties → Security and confirm SYSTEM and Administrators have Full Control.

If previous methods fail, the issue may be related to user profile corruption or deep registry problems requiring advanced intervention.

1. Create a new local administrator account:

New-LocalUser -Name "TempAdmin" -Password (ConvertTo-SecureString "TempPass123!" -AsPlainText -Force) -FullName "Temporary Administrator"
Add-LocalGroupMember -Group "Administrators" -Member "TempAdmin"

2. Log out and sign in with the new account
3. Test Windows Update from the new profile
4. If updates work, the original profile is corrupted. If not, proceed with advanced registry fixes:
5. Open Registry Editor and navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update

6. Delete any corrupted values and recreate the default structure
7. Navigate to and reset permissions on:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired

8. Use PowerShell to reset Windows Update policies:

Remove-Item "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -Recurse -Force -ErrorAction SilentlyContinue
Restart-Service wuauserv -Force

9. Run Windows Update Standalone Installer for critical updates:

wusa.exe /uninstall /kb:XXXXXXX /quiet /norestart

10. Restart and test updates from both the new and original user accounts

Verification: Run Get-WindowsUpdateLog in PowerShell to generate a readable update log and check for permission errors.