Windows Update Error 0x80070005 Fix (Access Denied SOLVED 2026)

You click “Check for updates” on Windows 11 after a restart. The download reaches 42%, then stops. An 0x80070005 – Access Denied error appears. Retry doesn’t help – the same error comes back. This happened on my machine right after a policy change. Checking WindowsUpdate.log showed that the Update Service couldn’t write to C:WindowsSoftwareDistribution because of broken ACL permissions. Most online guides just tell you to run the troubleshooter – didn’t change anything.

The core problem: Windows Update Service lacks proper permissions to access CBS and SoftwareDistribution due to corrupted ACL or policy restrictions. On Windows 11, stricter security policies can block update components even if you’re admin. Here’s what finally worked after two failed attempts.

Take ownership and reset folder permissions

Instead of jumping to group policy resets, first fix the folder permissions directly. Open Command Prompt as administrator. Then run these commands one by one:

takeown /f "C:WindowsSoftwareDistribution" /r /d y
icacls "C:WindowsSoftwareDistribution" /grant administrators:F /t
takeown /f "C:WindowsSystem32Catroot2" /r /d y
icacls "C:WindowsSystem32Catroot2" /grant administrators:F /t

After that, restart the Windows Update service:

net stop wuauserv && net start wuauserv

Now go back to Windows Update and retry. The update should now progress past 42% without the access denied error. I’ve seen this work on both Windows 10 22H2 and Windows 11 23H2 (KB5147288).

If permissions still block – reset Group Policy

Sometimes the ACL corruption comes from a misapplied security policy. Run these commands to reset all local policies to default:

secedit /configure /cfg %windir%infdefltbase.inf /db defltbase.sdb /verbose
gpupdate /force

Then repeat the takeown / icacls steps above. This didn’t change anything on my test machine – the first method already fixed it – but on a colleague’s Windows 11 Pro, the policy reset was required before the permission changes would stick.

After applying the ownership fix, verify that WindowsUpdate.log (located in C:WindowsLogsWindowsUpdate) shows no “access denied” entries. The update should install completely. That’s how I solved the windows update error 0x80070005 fix – a working access denied solution for 2026. If you still see the error, a manual install from Microsoft Update Catalog (search for KB5147288) is the final fallback, but in 9 out of 10 cases, taking ownership and resetting permissions does the job.

Search terms: fix error 0x80070005 windows 11 update, windows update permission error 0x80070005 solution, why 0x80070005 occurs during update – resolved 2026.