Fix Windows Update Error 0x80070005 – Access Denied 2026

Understanding Windows Update Error 0x80070005

Error 0x80070005 is one of the most persistent Windows Update issues, typically manifesting as an "Access Denied" error that prevents critical security and feature updates from installing. This error has become increasingly common in 2026 as Microsoft has tightened security controls around system modifications, sometimes creating conflicts with legitimate update processes.

Quick Fix Summary

Run Windows Update Troubleshooter from Settings → System → Troubleshoot → Other troubleshooters → Windows Update. If that fails, run sfc /scannow in an elevated Command Prompt to repair system files.

Symptoms

• Windows Update fails with error code 0x80070005
• "Access is denied" message appears during update installation
• Updates download but fail to install
• Windows Update service stops responding
• System shows "Some settings are managed by your organization" when not domain-joined

Root Causes

• Insufficient user permissions for Windows Update components
• Corrupted Windows Update service files or registry entries
• Antivirus software blocking update processes
• Damaged system files preventing proper update installation
• Group Policy restrictions interfering with update mechanisms
• Windows Update cache corruption in SoftwareDistribution folder

Solution Methods

Method 1: Run Windows Update Troubleshooter

Microsoft's built-in troubleshooter automatically detects and fixes common Windows Update issues including permission problems.

1. Press Windows + I to open Settings
2. Navigate to System → Troubleshoot → Other troubleshooters
3. Locate Windows Update and click Run
4. Allow the troubleshooter to scan for issues (this takes 2-5 minutes)
5. Follow any recommended actions presented by the troubleshooter
6. Restart your computer when prompted

Verification: Open Settings → Windows Update and click Check for updates. The error should no longer appear.

Method 2: Reset Windows Update Components

This method stops Windows Update services, clears the update cache, and restarts services with proper permissions.

1. Press Windows + X and select Terminal (Admin)
2. Stop Windows Update services by running these commands:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver

3. Rename the SoftwareDistribution and catroot2 folders:

ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old

4. Restart the Windows Update services:

net start wuauserv
net start cryptSvc
net start bits
net start msiserver

5. Close Command Prompt and restart your computer

Verification: Check Windows Update again. The system will recreate the folders and download fresh update metadata.

Method 3: Run System File Checker and DISM

Corrupted system files often cause permission errors. SFC and DISM repair these files using Windows component store.

1. Open Terminal (Admin) from the Windows + X menu
2. Run System File Checker to scan for corrupted files:

sfc /scannow

3. Wait for the scan to complete (15-30 minutes). If SFC finds issues, run DISM to repair the component store:

DISM /Online /Cleanup-Image /RestoreHealth

4. After DISM completes, run SFC again to ensure all files are repaired:

sfc /scannow

5. Restart your computer and test Windows Update

Verification: Run sfc /verifyonly to confirm system integrity, then check Windows Update functionality.

Method 4: Fix Registry Permissions and Group Policy

Incorrect registry permissions or Group Policy settings can block Windows Update access. This method resets these configurations.

1. Press Windows + R, type gpedit.msc, and press Enter
2. Navigate to Computer Configuration → Administrative Templates → Windows Components → Windows Update
3. Double-click Configure Automatic Updates and set it to Not Configured
4. Repeat for Specify intranet Microsoft update service location and Remove access to use all Windows Update features
5. Close Group Policy Editor and open Terminal (Admin)
6. Reset Windows Update registry permissions:

takeown /f C:\Windows\SoftwareDistribution /r /d y
icacls C:\Windows\SoftwareDistribution /grant administrators:F /t

7. Force Group Policy update:

gpupdate /force

8. Restart your computer

Verification: Check if the "Some settings are managed by your organization" message disappears from Windows Update settings.

Method 5: Recreate Windows Update Database

When other methods fail, completely rebuilding the Windows Update database often resolves persistent 0x80070005 errors.

1. Boot into Safe Mode: Hold Shift while clicking Restart, then Troubleshoot → Advanced options → Startup Settings → Restart → Press 4
2. Open Terminal (Admin) in Safe Mode
3. Stop all Windows Update related services:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
net stop dosvc

4. Delete the Windows Update database and cache:

del /f /s /q C:\Windows\SoftwareDistribution\*.*
rmdir /s /q C:\Windows\SoftwareDistribution
rmdir /s /q C:\Windows\System32\catroot2

5. Re-register Windows Update DLL files:

regsvr32 wuapi.dll
regsvr32 wuaueng.dll
regsvr32 wuaueng1.dll
regsvr32 wucltui.dll
regsvr32 wups.dll
regsvr32 wups2.dll
regsvr32 wuweb.dll

6. Restart services and reboot normally:

net start wuauserv
net start cryptSvc
net start bits
net start msiserver

7. Restart your computer normally

Verification: Windows will rebuild the update database on first check. This process may take 10-15 minutes.

Verification Steps

After applying any solution method, verify the fix by opening Settings → Windows Update and clicking Check for updates. The system should begin checking without displaying error 0x80070005. Additionally, run Get-WindowsUpdateLog in PowerShell to generate a readable update log at C:\Users\%USERNAME%\Desktop\WindowsUpdate.log and confirm no access denied errors appear in recent entries.

Advanced Troubleshooting

If the above methods didn't resolve error 0x80070005, try these advanced alternatives: Create a new local administrator account and test Windows Update from that profile to isolate user-specific permission issues. Run sfc /scannow from Windows Recovery Environment if system file corruption persists. Check antivirus logs for blocked Windows Update processes and temporarily disable real-time protection during updates. For enterprise environments, verify that Windows Update for Business policies aren't conflicting with local update attempts. As a last resort, consider using the Windows 11 Media Creation Tool to perform an in-place upgrade repair, which preserves files while refreshing system components.