# How to Fix Error 0x80070005 (Access Denied) in Windows 11

URL: https://www.mytechnician.tech/tips/fix-error-0x80070005-access-denied-windows-11/
Published: 2026-08-03 | Author: Ankit Kumar
Tags: Windows 11, Troubleshooting, Fix, Updates, System
Summary: Error 0x80070005 blocks Windows Update, Store downloads, and activation with an access denied message. Here is how to restore the permissions it needs.
Recommended app: PC-Troubleshooter — https://www.mytechnician.tech/apps/windows-troubleshooter/ (Microsoft Store: https://apps.microsoft.com/detail/9N7RWKW8SP24?hl=en-us&cid=mytechnician-web). Optional; every step below uses built-in Windows tools.

## The Problem
**0x80070005** is Windows' generic **ACCESS_DENIED** result, dressed up as an error code. Something — the update service, the Store, the activation client, an installer — asked the operating system for access and was refused.

The confusing part is that the refusal usually has nothing to do with *your* account being an administrator. It is normally one of four things: a service running under a system account that has lost permission to a folder or registry key, security software blocking the operation, damaged Windows Update working folders, or a corrupted local profile.

> **Getting "You need permission to perform this action" on your own files instead?** That is the file-ownership version of the same refusal — see [fix access denied and "you need permission"](https://www.mytechnician.tech/tips/fix-access-denied-you-need-permission-windows-11/).

## Symptoms
* **Windows Update** fails with `0x80070005` and retries endlessly.
* **Microsoft Store** downloads stop with the same code.
* **Windows activation** fails with `0x80070005`.
* An installer or `.msi` quits partway with "access is denied".
* A scheduled task or script fails with the code even though it runs fine manually.

## Step 1: Confirm You Are Actually an Administrator
1. Open **Settings** → **Accounts** → **Your info** and look for **Administrator** under your name.
2. If it says **Standard user**, either sign in with an admin account or have one change your type in **Settings** → **Accounts** → **Other users**.
3. Retry the failing action from an elevated window: right-click **Start** → **Terminal (Admin)**, or right-click an installer → **Run as administrator**.
4. On a work or school PC, policy may be blocking this deliberately — check with your IT team before changing anything.

## Step 2: Turn Off Third-Party Security Software Temporarily
Security suites intercept file and registry writes, and a blocked write comes back as access denied.

1. Fully exit the suite from the system tray, or disable its real-time and "ransomware protection" modules.
2. Retry the failing action.
3. If it now succeeds, add an exclusion for the relevant folder, or uninstall the suite and run the vendor's official removal tool — disabling alone often leaves filter drivers active.
4. Microsoft Defender takes over automatically: [fix Windows Defender not working](https://www.mytechnician.tech/tips/fix-windows-defender-not-working/).
5. Also check controlled folder access: **Windows Security** → **Virus & threat protection** → **Manage ransomware protection** → turn **Controlled folder access** off while testing.

## Step 3: Reset the Windows Update Components
For update and Store failures, the working folders are usually the problem. Renaming them forces Windows to build clean ones.

1. Right-click **Start** → **Terminal (Admin)**.
2. Stop the services:
   ```
   net stop wuauserv
   net stop cryptSvc
   net stop bits
   net stop msiserver
   ```
3. Rename the two cache folders:
   ```
   ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
   ren C:\Windows\System32\catroot2 catroot2.old
   ```
4. Start everything again:
   ```
   net start wuauserv
   net start cryptSvc
   net start bits
   net start msiserver
   ```
5. Reboot and retry the update. More on update failures: [fix Windows 11 update errors](https://www.mytechnician.tech/tips/fix-windows-11-update-errors/) and [fix Windows Update stuck](https://www.mytechnician.tech/tips/fix-windows-update-stuck-windows-11/).

## Step 4: Reset the Microsoft Store Cache
1. Press **Windows + R**, type `wsreset.exe`, and press Enter. A blank window opens for about 30 seconds and then the Store launches — that is the whole procedure.
2. If the Store itself is broken, go to **Settings** → **Apps** → **Installed apps** → **Microsoft Store** → **Advanced options** → **Repair**, then **Reset**.
3. Full walkthrough: [fix Microsoft Store not working](https://www.mytechnician.tech/tips/fix-microsoft-store-not-working-windows-11/).

## Step 5: Repair the System Files and Component Store
1. In **Terminal (Admin)**:
   ```
   sfc /scannow
   ```
2. Then:
   ```
   DISM /Online /Cleanup-Image /RestoreHealth
   ```
3. Reboot and run `sfc /scannow` again.
4. Detail: [how to run SFC and DISM](https://www.mytechnician.tech/tips/how-to-run-sfc-dism-repair-windows-11/).
5. If DISM itself fails with `0x800f081f`, it cannot find replacement files — see [fix DISM error 0x800f081f](https://www.mytechnician.tech/tips/fix-dism-error-0x800f081f-windows-11/).

## Step 6: Restore Permissions on the System Drive
Only do this if the earlier steps have not worked. It rewrites inherited permissions across the drive and takes a long time on a large disk.

1. In **Terminal (Admin)**, reset registry and file permissions to their defaults:
   ```
   secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose
   ```
2. Reboot when it finishes.
3. This restores the standard permission set that Windows shipped with, which is exactly what a broken third-party installer or an aggressive "optimiser" tends to have damaged.
4. Do not skip the reboot — services will not pick up the new permissions until they restart.

## Step 7: Test With a New Local Administrator Account
A damaged profile produces access-denied errors that follow you between apps but disappear for any other user.

1. **Settings** → **Accounts** → **Other users** → **Add account**.
2. Choose **I don't have this person's sign-in information** → **Add a user without a Microsoft account**.
3. Create the account, then set it to **Administrator** under **Change account type**.
4. Sign in as that user and retry the failing action.
5. If it works there, the original profile is damaged — move your files across rather than trying to repair it. See [fix "signed in with a temporary profile"](https://www.mytechnician.tech/tips/fix-temporary-profile-windows-11/) and [fix User Profile Service failed the sign-in](https://www.mytechnician.tech/tips/fix-user-profile-service-failed-sign-in-windows-11/).

## Step 8: Deal With Activation Specifically
If the code appears only during activation:

1. Open **Terminal (Admin)** and run:
   ```
   slmgr /ato
   ```
2. If that fails, re-enter the key:
   ```
   slmgr /ipk XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
   ```
3. Check the date, time, and time zone are correct in **Settings** → **Time & language** — a wrong clock breaks the secure connection to Microsoft's activation servers and returns access denied.
4. Confirm the PC can reach the internet without a proxy or VPN interfering, then retry.
5. Full guide: [activate Windows 11 and fix activation errors](https://www.mytechnician.tech/tips/activate-windows-11-fix-activation-errors/).

## What Not to Do
* **Don't grant "Everyone: Full Control" on system folders** to make an error go away. It removes protections that stop malware from modifying Windows, and it does not fix the underlying cause.
* **Don't disable User Account Control.** It does not resolve 0x80070005 and it weakens the machine.
* **Don't run registry permission "fixers" from download sites.** The `secedit` command in Step 6 is the supported equivalent.
* **Don't leave security software uninstalled** after testing — either reinstall it or stay on Defender.

## Still Not Working?
If a brand new administrator account also hits the error, and SFC, DISM, and the permission reset have all run clean, an in-place repair install replaces every Windows component while keeping your files and apps: [reinstall Windows without losing data](https://www.mytechnician.tech/tips/reinstall-windows-without-losing-data/). Back up first — [set up automatic backups](https://www.mytechnician.tech/tips/set-up-automatic-backups/).

Related: [fix error 0x80004005](https://www.mytechnician.tech/tips/fix-error-0x80004005-unspecified-error-windows-11/), [fix "can't delete file in use"](https://www.mytechnician.tech/tips/fix-cant-delete-file-in-use-windows-11/), and [fix Windows Firewall blocking apps](https://www.mytechnician.tech/tips/fix-windows-firewall-blocking-apps-windows-11/).

---
Source: https://www.mytechnician.tech/tips/fix-error-0x80070005-access-denied-windows-11/ — My Technician, free Windows 10/11 troubleshooting guides.
Related tool: PC-Troubleshooter (PC-Troubleshooter is a system diagnostic and repair tool for Windows 10 and Windows 11—hardware, drivers, network, and common fixes in one app.) — https://www.mytechnician.tech/apps/windows-troubleshooter/
More guides: https://www.mytechnician.tech/llms.txt