Fix Windows Update Error 0x80240017

You're applying a cumulative update, it reaches 87% – then fails. Windows rolls back, and you see 0x80240017. In some cases, this happens because the Component-Based Servicing (CBS) component lacks proper permission to access update packages. Windows 11 enforces stricter validation, but the root cause is often the same: permission restrictions block CBS.

Why the update stops at 87% with 0x80240017

Check CBS.log – you'll likely find permission errors. The update process tries to write to WinSxS or SoftwareDistribution, but something (often a policy change or leftover ACL) prevents it. I've seen this after migrating a system or running debloat scripts.

One method that usually works (reset permissions via ICACLS)

Instead of taking ownership everywhere, focus on resetting the permission chain. This approach worked for several people in the Windows community.

# Run Command Prompt as Administrator
icacls %windir%WinSxS /reset /t
icacls %windir%SoftwareDistribution /reset /t
net stop wuauserv && net start wuauserv

After running these, try the update again. Did it fix it at first? Not always – but in my experience, this clears the permission trap that triggers windows update error 0x80240017 fix attempts.

If you're still stuck, check the error path: when ICACLS reset fails (e.g., access denied even as admin), move to resetting Windows Update group policies. Use gpupdate /force and delete %windir%System32GroupPolicy.

What to check after applying the fix

• Installation should pass 87% without rollback
• CBS.log shows no "access denied" entries
• The update appears as "Installed" in Update History

Avoid skipping the ICACLS reset – simply restarting the Windows Update service rarely fixes 0x80240017 windows update fix alone. Also, don't ignore permission errors in logs; they're the real culprit.

Still seeing windows update error 0x80240017 solution not working? The search query "update fails at 87 percent 0x80240017" is exactly your scenario. In that case, consider a repair install using an ISO – but that's a last resort.

This guide focuses on solving the 87% stall. Results vary by system – no guarantees, but the ICACLS reset has a high success rate.