Fix Windows Update Error 0x80070005 (Access Denied) - 2025 Guide

Updated: 11/29/2025

You are trying to update Windows to the latest version or install a critical security patch, but the progress bar freezes. Then, you get the infamous message: 'There were some problems installing updates, but we'll try again later. Error 0x80070005.' In the world of Windows, this code translates to 'Access Denied.' It means Windows Update lacks the file permissions required to make changes to your system drive. This often happens after a malware infection, a botched third-party antivirus removal, or simply because your User Profile permissions got corrupted.

Table of Contents

Understanding 'Access Denied' in Windows

Unlike a download error, 0x80070005 is a security error. The system thinks you (or the Update Service) are an intruder trying to modify protected system files.

Crucial Warning: Before attempting the fixes below, creating a System Restore Point is mandatory. We will be modifying security permissions, and if done incorrectly, it can lock you out of Windows.

Method 1: Reset Windows Update Components (The Deep Clean)

If permissions are broken inside the distribution folder, we need to force Windows to create a fresh folder. This is the most reliable fix for 0x80070005.

Step 1: Open Administrator Command Prompt

Press the Windows Key, type cmd, right-click it, and select Run as Administrator.

Step 2: Stop the Update Services

We need to kill the services temporarily so we can delete the corrupted files. Enter these commands one by one:

net stop wuauserv net stop cryptSvc net stop bits net stop msiserver

Step 3: Rename the Catroot Folders

This effectively 'deletes' the old update cache without actually deleting the data (it just creates a backup named .old). Run these:

ren C:\Windows\SoftwareDistribution SoftwareDistribution.old ren C:\Windows\System32\catroot2 Catroot2.old

Step 4: Restart Services

Now turn everything back on. Windows will see the folders are missing and generate clean, permission-correct versions.

net start wuauserv net start cryptSvc net start bits net start msiserver

Method 2: Grant Full Control to User Profile

Sometimes the error triggers because your specific User Account lost 'Full Control' over the AppData packages.

Step 1: Navigate to Packages

Press Win + R, type the following path, and hit Enter:

C:\Users\%USERNAME%\AppData\Local

Step 2: Edit Permissions

Right-click the Packages folder and select Properties. Go to the Security tab and click Advanced.

Step 3: Add Everyone

Ensure that your username has 'Full Control'. If you see any account labeled 'Unknown Account', remove it. Click Enable Inheritance if it is disabled.

Method 3: Run SFC and DISM

If system files are actually missing (common after malware attacks), the System File Checker can grab clean copies from the Windows image store.

sfc /scannow

If SFC finds errors it cannot fix, run the Deployment Image Servicing and Management tool:

DISM /Online /Cleanup-Image /RestoreHealth