ANAVEM
Languagefr
How to Use System File Checker (SFC) to Repair Corrupted Windows 11 Files

How to Use System File Checker (SFC) to Repair Corrupted Windows 11 Files

Learn to run SFC scans from Windows Terminal and Command Prompt to detect and repair corrupted system files in Windows 11, including offline recovery methods.

Emanuel DE ALMEIDAEmanuel DE ALMEIDA
March 18, 2026 12 min 0
easywindows11 9 steps 12 min

Why Use System File Checker in Windows 11?

System File Checker (SFC) is a built-in Windows utility that has been protecting system integrity since Windows 98, and it remains fully functional in Windows 11 through 2026. When Windows starts behaving strangely—applications crash unexpectedly, system features stop working, or you encounter mysterious error messages—corrupted system files are often the culprit.

SFC works by scanning all protected system files and comparing them against cached copies stored in %WinDir%\System32\dllcache. When it finds files that have been modified, deleted, or corrupted, it automatically replaces them with the correct versions. This process can resolve a wide range of issues without requiring a complete Windows reinstallation.

What Makes SFC Essential for Windows 11 Maintenance?

Unlike third-party repair tools, SFC is developed by Microsoft and has intimate knowledge of Windows system files. It can detect subtle corruption that might not be obvious to users but could cause stability issues over time. The tool is particularly valuable because it can run both online (while Windows is running) and offline (from the recovery environment), making it accessible even when Windows won't boot properly.

Modern Windows 11 installations benefit from SFC's integration with DISM (Deployment Image Servicing and Management), which can download fresh system files from Windows Update when local cached copies are also corrupted. This combination provides a robust repair mechanism that can handle most system file corruption scenarios without data loss.

Related: How to Remove Recommended Section from Windows 11 Start Menu

Related: How to Add 'Turn Off Display' to Windows 11 Context Menu

Related: How to Restore Windows 10-Style Start Menu in Windows 11

Related: How to Get Windows 11 26H1: What It Is, Who It's For, and

Related: Enable or Disable Copilot File Search on Windows 11

Implementation Guide

Full Procedure

01

Open Command Prompt or Windows Terminal as Administrator

First, you need elevated privileges to run SFC. Press Windows + X to open the Power User menu, then click Windows Terminal (Admin) or Command Prompt (Admin). Alternatively, click the Start button, type cmd or terminal, right-click the result, and select Run as administrator.

When the User Account Control (UAC) prompt appears, click Yes to grant administrator privileges.

Pro tip: Windows Terminal is the modern replacement for Command Prompt and supports multiple tabs. Both work identically for SFC commands.

Verification: Your command window should show C:\Windows\system32> as the prompt, indicating you're running with admin rights.

02

Run the Basic SFC Scan

Execute the standard System File Checker scan by typing the following command and pressing Enter:

sfc /scannow

This command scans all protected system files and replaces corrupted files with cached copies from %WinDir%\System32\dllcache. The scan typically takes 5-60 minutes depending on your system speed and the number of files to check.

You'll see a progress percentage that updates as the scan proceeds. Don't interrupt this process or close the window.

Warning: Never cancel an SFC scan in progress. Interrupting the scan can cause additional system file corruption.

Verification: Wait for the scan to complete and display one of the result messages described in the next step.

03

Interpret SFC Scan Results

After the scan completes, SFC will display one of these messages:

Result MessageMeaningRequired Action
Windows Resource Protection did not find any integrity violationsNo corrupted files foundNone - your system files are healthy
Windows Resource Protection found corrupt files and successfully repaired themIssues found and fixedRestart your computer
Windows Resource Protection found corrupt files but was unable to fix some of themPartial repair failureRun DISM tool first, then retry SFC
Windows Resource Protection could not perform the requested operationSFC couldn't run properlyTry Safe Mode or WinRE method

For detailed information about what was repaired, check the SFC log file:

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >%userprofile%\Desktop\sfcdetails.txt

Verification: If repairs were made, restart your computer and test if your original issue is resolved.

04

Run DISM if SFC Cannot Fix Files

If SFC reports it found corrupt files but couldn't fix them, run the Deployment Image Servicing and Management (DISM) tool first. DISM can download fresh system files from Windows Update to repair the local component store that SFC relies on.

Execute this command in your admin command prompt:

DISM /Online /Cleanup-Image /RestoreHealth

This process requires an internet connection and may take 10-30 minutes. DISM will download replacement files from Microsoft's servers to fix the Windows component store.

After DISM completes successfully, run SFC again:

sfc /scannow
Pro tip: You can use /CheckHealth first to quickly verify if the image is corrupted: DISM /Online /Cleanup-Image /CheckHealth

Verification: DISM should report "The restore operation completed successfully" before you retry SFC.

05

Access Windows Recovery Environment for Offline Repairs

If Windows won't boot normally or SFC fails repeatedly, you can run it from the Windows Recovery Environment (WinRE). There are two ways to access WinRE:

Method 1 - From Windows Settings:

Go to Settings > System > Recovery, then under Advanced startup, click Restart now.

Method 2 - Using Installation Media:

Boot from a Windows 11 installation USB or DVD. When the Windows Setup screen appears, click Next, then click Repair your computer in the bottom-left corner.

From either method, navigate to Troubleshoot > Advanced options > Command Prompt.

Warning: Drive letters may be different in WinRE. What appears as C: in Windows might be D: or another letter in the recovery environment.

Verification: You should see a command prompt with X:\Sources> or similar, indicating you're in the recovery environment.

06

Identify the Correct Windows Drive in WinRE

Before running SFC in the recovery environment, you must identify which drive contains your Windows installation. Drive letters often change in WinRE.

Use these commands to locate your Windows drive:

diskpart
list volume
exit

Look for a volume with enough space to contain Windows (typically 20GB+). Then test each likely drive by checking for the Windows folder:

dir C:\Windows
dir D:\Windows
dir E:\Windows

The correct drive will show the Windows directory with subdirectories like System32, SysWOW64, and others.

Common scenarios:

  • If C: shows Windows folder: Your Windows drive is C:
  • If D: shows Windows folder: Your Windows drive is D:
  • If no drive shows Windows: Try other letters or check if drives are encrypted

Verification: Running dir [drive]:\Windows\System32 should show hundreds of system files and folders.

07

Run SFC in Offline Mode

Once you've identified your Windows drive (let's assume it's D: for this example), run SFC with the offline parameters:

sfc /scannow /offbootdir=D:\ /offwindir=D:\Windows

Replace D: with your actual Windows drive letter. The parameters mean:

  • /offbootdir=D:\ - Specifies the location of the offline boot directory
  • /offwindir=D:\Windows - Specifies the location of the offline Windows directory

The scan will proceed similarly to the online version but may take longer since it's running from the recovery environment.

Pro tip: If you have multiple Windows installations, make sure you're targeting the correct one by checking the creation dates of files in the Windows folders.

Verification: SFC will display progress and completion messages just like in normal Windows. Wait for the "Windows Resource Protection" result message.

08

Use Additional SFC Options for Specific Scenarios

SFC offers several other switches for specific situations:

Scan on next boot only:

sfc /scanonce

Scan on every boot until cancelled:

sfc /scanboot

Cancel scheduled boot scans:

sfc /cancel

Enable Windows File Protection (if disabled):

sfc /enable

You can also run SFC from PowerShell with the same syntax. Open Windows PowerShell (Admin) and use the same commands.

Pro tip: Use /scanonce if you want to check files during the next boot without affecting subsequent startups. This is useful for detecting boot-time file corruption.

Verification: For scheduled scans, restart your computer and check the Event Viewer under Windows Logs > System for SFC-related entries.

09

Review SFC Logs and Troubleshoot Common Issues

If SFC continues to fail or you need detailed information about what was repaired, examine the SFC log files. The main log is stored in the CBS (Component-Based Servicing) log:

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >%userprofile%\Desktop\sfcdetails.txt

Open the sfcdetails.txt file on your desktop to see exactly which files were scanned, repaired, or couldn't be fixed.

Common troubleshooting steps:

  • Access denied errors: Ensure you're running as administrator and temporarily disable antivirus software
  • Scan hangs or freezes: Boot into Safe Mode and retry, or use the WinRE method
  • Persistent corruption: Run chkdsk /f /r to check for disk errors first
  • SFC finds no issues but problems persist: Consider running Windows Memory Diagnostic or performing a clean Windows installation
Warning: If SFC repeatedly fails and you're experiencing blue screens or severe instability, back up your data immediately as this may indicate hardware failure.

Verification: After following these steps, your Windows 11 system should have verified and repaired system file integrity. Test your original issue to confirm resolution.

Frequently Asked Questions

How long does SFC scannow take to complete in Windows 11?+
SFC scannow typically takes 5-60 minutes depending on your system speed, storage type, and number of files to check. SSDs complete faster than traditional hard drives. The scan checks thousands of system files, so patience is required. You'll see progress percentages during the scan, and it's important not to interrupt the process.
What should I do if SFC finds corrupt files but cannot fix them?+
Run DISM first with the command 'DISM /Online /Cleanup-Image /RestoreHealth' which downloads fresh files from Windows Update to repair the component store. After DISM completes successfully, run SFC again. This two-step process resolves most cases where SFC initially fails to repair files.
Can I run SFC scan if Windows 11 won't boot normally?+
Yes, you can run SFC from Windows Recovery Environment (WinRE). Boot from Windows installation media or access recovery options, then use Command Prompt with offline parameters like 'sfc /scannow /offbootdir=D:\ /offwindir=D:\Windows'. Remember that drive letters may be different in recovery mode, so verify the correct Windows drive first.
Is it safe to run SFC scan while using Windows 11 normally?+
Yes, SFC is designed to run safely while Windows is active. It only replaces corrupted files with verified cached copies and doesn't modify healthy system files. However, avoid running resource-intensive applications during the scan for optimal performance, and ensure you have administrator privileges before starting.
What's the difference between SFC and DISM in Windows 11?+
SFC checks and repairs individual system files using local cached copies, while DISM repairs the Windows component store and can download files from Windows Update. SFC is faster for basic file corruption, but DISM is needed when the local file cache is also corrupted. Use DISM first if SFC fails, then retry SFC for comprehensive repair.
Emanuel DE ALMEIDA
Written by

Emanuel DE ALMEIDA

Microsoft MCSA-certified Cloud Architect | Fortinet-focused. I modernize cloud, hybrid & on-prem infrastructure for reliability, security, performance and cost control - sharing field-tested ops & troubleshooting.

Discussion

Share your thoughts and insights

You must be logged in to comment.

Loading comments...