Error 0x80070005 is Windows saying “Access Denied” in its least helpful way. It pops up in the middle of Windows updates, Store app installs, program setups, and even activation — always with the same unhelpful code and rarely with an explanation of what was denied. The underlying story is permissions: something tried to touch a file, folder, or registry key it was not allowed to touch.
Because the same code appears in so many contexts, the fix depends on where you hit it. The steps below cover the common scenarios in the order you should try them, starting with the quick checks that resolve most cases and moving to permission repairs for the stubborn ones.
Why this happens
- Corrupted file or folder permissions. System directories end up with wrong ownership or ACLs after bad updates or migrations.
- Antivirus blocking legitimate operations. Third-party security tools deny file access to updaters and installers.
- Non-administrator account. Standard users hit Access Denied on operations that need elevation.
- Corrupted user profile. A damaged profile carries broken permissions everywhere.
- Windows Update component corruption. Damaged update services fail their own permission checks.
- Malware damage. Infections sometimes rewrite permissions to protect themselves, breaking legitimate access.
How to fix it
Work through these in order, noting the driver name from the blue screen if shown.
Fix 1: Confirm you are an administrator and retry elevated
The simplest cause is the most overlooked.
- Go to Settings > Accounts > Your info and check that it says Administrator under your name.
- If it says Standard, sign into an admin account or have one promote yours via Settings > Accounts > Other users.
- For installers, right-click the setup file and choose Run as administrator.
- Retry the operation that failed.
Fix 2: Run the Windows Update troubleshooter
For update-related 0x80070005, start here.
- Go to Settings > System > Troubleshoot > Other troubleshooters.
- Run the Windows Update troubleshooter and apply its fixes.
- Restart and retry the update.
- If the error appears in the Microsoft Store instead, run the Windows Store Apps troubleshooter from the same page.
Fix 3: Temporarily disable third-party antivirus
Security software is a leading cause of false Access Denied errors.
- Open your antivirus and turn off real-time protection temporarily.
- Retry the update, install, or activation that failed.
- If it succeeds, open the antivirus exclusions and add the affected app or the Windows Update folders.
- Re-enable protection right away.
- Consider whether Microsoft Defender alone meets your needs — it never conflicts with Windows’ own operations.
Fix 4: Reset the Windows Update components
Corrupted update services can deny themselves access.
- Open Terminal (Admin) from
Win + X. - Stop the services:
net stop wuauserv,net stop bits,net stop cryptSvc. - Rename the cache:
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old. - Restart the services:
net start wuauserv,net start bits,net start cryptSvc. - Retry the update from Settings > Windows Update.
Fix 5: Repair system files with SFC and DISM
Damaged system files produce phantom permission errors.
- Open Terminal (Admin).
- Run
sfc /scannow. - Run
DISM /Online /Cleanup-Image /RestoreHealth. - Restart and retry.
Fix 6: Reset permissions on the affected folders
When a specific folder has broken ACLs, fix them directly.
- Open Terminal (Admin).
- For Store app issues, reset the WindowsApps-adjacent permissions carefully — safer: run
wsreset.exefromWin + Rto clear the Store cache first. - For general permission corruption, Microsoft’s documented approach uses
icacls: e.g.icacls "C:\Program Files\WindowsApps" /reset /t /c /q— run only on the folder actually causing the error, never blindly on the whole drive. - If ownership is the issue, take ownership first via the folder’s Properties > Security > Advanced > Change owner to Administrators, then re-run the operation.
- Microsoft’s official guidance for permission-related update failures is on Microsoft Support .
Fix 7: Create a fresh administrator account
A corrupted profile carries broken permissions that repairs cannot always fix.
- Go to Settings > Accounts > Other users > Add account.
- Choose I don’t have this person’s sign-in information > Add a user without a Microsoft account.
- Create the account, then change it to Administrator.
- Sign into the new account and retry the failing operation.
- If it works there, migrate your files from the old profile.
A related install-blocking error with its own walkthrough is error 0x80070002 , and the Windows 11 24H2-specific variant of this code is covered in our 0x80070005 in 24H2 guide .
Fix 8: Use the built-in Administrator account for stubborn cases
Some permission corruption is tied to the user profile itself; the hidden Administrator account sidesteps it entirely.
- Open Terminal (Admin) and run
net user administrator /active:yes. - Sign out and sign into the Administrator account that now appears on the login screen.
- Retry the update, install, or activation that was failing with 0x80070005.
- If it succeeds there, your main profile has permission damage — migrate to a fresh profile rather than fighting the old one.
- When finished, disable the hidden account again for security:
net user administrator /active:no.
Closing
Error 0x80070005 is almost never as serious as it looks — it is a permissions dispute, not system damage. Check admin rights, get the antivirus out of the way, reset the update components, and repair system files, and the Access Denied wall comes down in the large majority of cases. When it does not, a fresh admin account sidesteps profile-level corruption cleanly. Note where the error appears before you start, since the context tells you which of these fixes to try first — and resist the urge to take ownership of entire system folders, which creates bigger permission problems than it solves. When in doubt, fix the specific folder, not the whole drive. Broad permission changes are how small access problems turn into unbootable systems.
