0x80070005

E_ACCESSDENIED during Windows Update or service install

Product: Windows Server
Severity: Severity: high
Updated: Oct 21, 2026
Read: 4 min

The calling process lacks permission on a file, registry key, or COM object. Most often seen during cumulative updates and MSI installs.

Error message

Error 0x80070005: Access is denied.

Symptoms

Windows Update fails with code 0x80070005 and rolls back.
MSI installers stop at "Starting services" and exit with 1603.
Event Viewer logs Event ID 20 under WindowsUpdateClient.

Cause

The SYSTEM account was removed from ACLs on %WINDIR%\SoftwareDistribution.
Endpoint protection is locking the target files during servicing.
Group Policy restricts the "Log on as a service" right.

Resolution

01
Step 1: Reset the Windows Update component store
Stop the update services, rename the cache folders, and restart. This forces a clean download on the next scan.
cmd
```
net stop wuauserv
net stop bits
ren %WINDIR%\SoftwareDistribution SoftwareDistribution.old
ren %WINDIR%\System32\catroot2 catroot2.old
net start bits
net start wuauserv
```
02
Step 2: Restore default permissions
Grant SYSTEM and TrustedInstaller full control on the servicing folders.
cmd
```
icacls %WINDIR%\SoftwareDistribution /grant "NT AUTHORITY\SYSTEM":(OI)(CI)F /T
```
03
Step 3: Repair the component store
Run DISM followed by SFC from an elevated prompt. Reboot when both complete.
cmd
```
DISM /Online /Cleanup-Image /RestoreHealth
sfc /scannow
```

← Back to index