Fix Windows Update Error 0x80070005 ("Access Denied")

Windows tries to install an update, gets most of the way there, then fails with error 0x80070005. The code translates to "Access Denied" — Windows didn't have permission to write the files it needed, or something blocked it partway through. It's a common Windows 10 and 11 update error, and it's fixable without reinstalling anything. Work through the steps below in order.

Quick checklist

Restart and retry the update
Run the Windows Update troubleshooter
Free up disk space
Temporarily pause your antivirus
Reset the Windows Update components
Run SFC and DISM scans
Check your date, time and admin account

What error 0x80070005 means

0x80070005 is Windows' generic "Access Denied" code. During an update it usually means the update service couldn't access or replace a file — because of corrupted update files, not enough disk space, antivirus interference, or a permissions problem. The same code can also appear in the Microsoft Store and Windows activation, and the permission-related fixes here help there too.

The 7 fixes

Restart and retry

It sounds too simple, but a pending restart often holds files open and blocks the update. Clear it first.

Save your work and fully restart your PC (choose Restart, not Shut down).
Go to Settings → Windows Update and click Retry or Check for updates.

Run the Windows Update troubleshooter

Windows has a built-in tool that detects and repairs many update problems automatically — always worth running before the manual steps.

Go to Settings → System → Troubleshoot → Other troubleshooters.
Find Windows Update and click Run.
Apply any fixes it suggests, then retry the update.

Free up disk space

Updates need room to download and unpack. A nearly full drive can trigger an access-denied failure.

Go to Settings → System → Storage and check your free space.
If it's low, run Disk Cleanup (search for it in the Start menu) and clear temporary files. Aim for at least several GB free.
Retry the update.

Temporarily pause your antivirus

Third-party antivirus sometimes blocks update files mid-install, which Windows reports as access denied.

Temporarily disable your third-party antivirus (right-click its tray icon, or use its settings).
Retry the update.
Turn protection back on afterwards, whether or not it worked.

Reset the Windows Update components

This clears out corrupted update files by resetting the folders where Windows stores them. It's the fix that resolves most stubborn cases.

Click Start, type cmd, right-click Command Prompt → Run as administrator.
Type these lines one at a time, pressing Enter after each, to stop the update services:
net stop wuauserv
net stop bits
Now rename the cache folders so Windows rebuilds them:
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old
Restart the services:
net start wuauserv
net start bits
Close Command Prompt, restart your PC, and retry the update.

Run SFC and DISM scans

If corrupted system files are behind the error, these two built-in tools find and repair them.

Open Command Prompt as administrator again.
Run sfc /scannow and wait for it to finish.
Then run DISM /Online /Cleanup-Image /RestoreHealth and let it complete (it can take a while).
Restart and retry the update.

Check your date, time and account

A wrong system clock or a non-administrator account can both cause access-denied errors during updates.

Go to Settings → Time & language → Date & time and turn on Set time automatically.
Make sure you're signed in to an administrator account (Settings → Accounts → Your info will say "Administrator").
Retry the update.

Frequently asked questions

Is it safe to rename the SoftwareDistribution folder?

Yes. It only holds temporary update files. Renaming it forces Windows to create a fresh one and re-download what it needs — your personal files and apps are untouched.

I see 0x80070005 in the Microsoft Store, not Windows Update. Do these help?

Yes. It's the same "Access Denied" code. The troubleshooter, antivirus check, and making sure you're on an admin account (fixes 2, 4 and 7) all apply to the Store version too.

What if SFC says it couldn't fix some files?

Run the DISM command in fix 6 first, then run sfc /scannow again. DISM repairs the underlying image that SFC relies on, so the second SFC pass often succeeds.

Do I need to be an administrator for these fixes?

Yes. Resetting update components and running SFC/DISM require an administrator account and an elevated Command Prompt ("Run as administrator"). That's also a fix in itself, since a standard account can cause this error.

Update still failing with 0x80070005? Tell us your Windows version and which update is failing, and we'll help you narrow it down.

Send us the details →