Windows update Error 0x80070005 - Need a fix? Click here.

Anonymous
2009-07-02T19:01:34+00:00

The error code 0x80070005 is also described as ACCESS DENIED. 

Please follow these instructions if you are encountering this error code when checking or installing updates via Windows Udpate. 

To correct the problem, you can try the steps below. Keep in mind that these steps are still experimental. I look forward to your feedback and results. For the long term, we hope that we can create an automated solution for all.

  1. Download and install SubInACL from the Microsoft Download Center http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=23510
  2. Open Notepad (Click Start, type Notepad, and then press Enter)
  3. Copy and paste the following text into Notepad

Set OSBIT=32

IF exist "%ProgramFiles(x86)%" set OSBIT=64

set RUNNINGDIR=%ProgramFiles%

IF %OSBIT% == 64 set RUNNINGDIR=%ProgramFiles(x86)%

subinacl /subkeyreg "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing" /grant="nt service\trustedinstaller"=f

  1. Close Notepad, and make sure you save it. When you save the text, make sure that you set

Save as Type to “All Files (*.*)”. Very important! The file name needs end with .CMD. For example: fix.cmd. Lastly, when you save the file, make sure you save it at a location where it will be easy for you to find.

  1. Right click on the file that you just saved in step #4, and select “Run as Adminstrator”

To confirm that you have the symptoms and to validate the problem, please see the below:

The following is applicable to Windows 7 and Windows Vista .

  1. Download AccessChk (Sysinternals).  This tool allows you to evaluate the access level of specific users or groups of resources including files, directories, Registry keys, global objects and Windows services.  Here's the link to download the tool: http://technet.microsoft.com/en-us/sysinternals/bb664922.aspx

2. Save the zip file on your desktop, and extract the file:

  • Right click on the file, and select Extract All...
  • Click Next when prompted for the Destination.

As a result, you should see a folder called AccessChk  on your desktop.

  1. Open the folder AccessChk 
  2. Hold the shift-key and right click in the window.  Select "Open Command Prompt Here"
  3. A command prompt window should open with a similar prompt:

C:\Users<USERNAME>\Desktop\accesschk>

6.  Type the following command, and press Enter:

accesschk.exe -s -n "nt service\trustedinstaller" -k "hklm\software\Microsoft\Windows\CurrentVersion\Component Based Servicing" >accesskchk.txt

Tip: You should be able to copy and paste the command into the command prompt.

  1. Close the Command Prompt Window.  Open the Accesschk folder on yoru desktop (if it has been closed).
  2. Double click on Accesschk.txt (the text file), this should open Notepad.

9.  Copy and Paste your results with a new question on the Windows Update forum.  (Make sure you write 0x80070005 in the subject line).

Cheers!

Kim N. L.

Microsoft Partner Technical Technical Lead

Windows for home | Windows 11 | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2011-10-13T21:55:56+00:00

Hello all,

I would like to apologize for the delayed response on this thread.  All the results (logs) that you have all posted in the thread are helpful.    Based on the various results, it’s evident that the problem has a common cause.  

Here’s a little background on the problem that you are experiencing:

When you use Windows Update to install updates for Windows Vista and Windows 7, the process relies on the Windows Module Installer (trustedinstaller.exe).  The TrustedInstaller is the online interface to the servicing stack.  To keep things simple, it’s one of the most important components when you install updates.   This method also allows Windows to be serviced (to install updates) without the need of an administrator.  In fact, when the components of Windows are being updated, it’s the TrustedInstaller that is used to update the operating system files. 

Furthermore, when you look at the security settings of certain servicing components of Windows, you would notice that the TrustedInstaller is the only item listed under the User Name and Groups with full permissions.   This is only true if the respective folder or registry key is kept at its default state.  In other words, changes to these security settings would cause the ACCESS DENIED (0x80070005).  It’s difficult to associate a culprit to the unwanted changes.   A possible cause that was previously mentioned is malware.

Awhile ago, I asked the community to run a Sysinternal Tool known as Access Check to capture the details of the problem.  The output of the tool would list all of the servicing components where the security permissions restricted the TrustedInstaller.  As a result, when you try to install updates for Windows, you would obtain the error 0x80070005 – also known as ACCESS DENIED.  In summary, it is the TrustedInstaller that has been denied of access to a component that it should have access to.

Here’s an example of the output:

HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Retry Agent

HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Sqm

HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Sqm\VistaSP1-KB936330~31bf3856ad364e35~x86~~6.0.1.18000

HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Sqm\VistaSP1-KB936330~31bf3856ad364e35~x86~~6.0.1.18000\InstallCounter

As you can see from the above, there are four registry keys with unexpected security settings.

...The Solution...

To correct the problem, you can try the steps below.  Keep in mind that these steps are still experimental.   I look forward to your feedback and results.  For the long term, we hope that we can create an automated solution for all.

1.       Download and install  SubInACL from the Microsoft Download Center http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=23510

2.       Open Notepad (Click Start, type Notepad, and then press Enter)

3.       Copy and paste the following text into Notepad

Set OSBIT=32

IF exist "%ProgramFiles(x86)%" set OSBIT=64

set RUNNINGDIR=%ProgramFiles%

IF %OSBIT% == 64 set RUNNINGDIR=%ProgramFiles(x86)%

subinacl /subkeyreg "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing" /grant="nt service\trustedinstaller"=f

4.       Close Notepad, and make sure you save it.  When you save the text, make sure that you set

Save as Type to “All Files (*.*)”.  Very important!  The file name needs end with .CMD.  For example:  fix.cmd.  Lastly, when you save the file, make sure you save it at a location where it will be easy for you to find.

5.       Right click on the file that you just saved in step #4, and select “Run as Adminstrator”

Thanks and I look forward to your feedback.

Kim

Was this answer helpful?

700+ people found this answer helpful.
0 comments

128 additional answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2011-12-02T15:54:15+00:00

    Greetings,

    I have been trying to fix this error for a while now... when I run Windows Update,

    I get the following message in a pop-up window:

    Windows could not search for new updates

    Error(s) found:

    Code 80070005  Windows Update encountered an unkown error.

    It also displays "Never" for Most recent check for updates and Updates were installed.  

    This is not correct... I was regularly updating this PC, until this error hit.

    I ran the SubinACL process... no luck.  

    I ran the AccessChk process and it created a 1.9 MB file.   here are some snippets from the file.  Is there a place to upload the entire file?

    HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_1_for_KB925697~31bf3856ad364e35~amd64~~6.0.0.1

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_1_for_KB929399~31bf3856ad364e35~amd64~~6.0.1.1

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2079403~31bf3856ad364e35~amd64~~6.0.1.0

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2117917~31bf3856ad364e35~amd64~~6.0.1.5

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2124261~31bf3856ad364e35~amd64~~6.0.1.0

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2207566~31bf3856ad364e35~amd64~~6.0.1.0

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2281679~31bf3856ad364e35~amd64~~6.0.1.0

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2296011~31bf3856ad364e35~amd64~~6.0.1.3

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2305420~31bf3856ad364e35~amd64~~6.0.1.3

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.0.1.1

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2347290~31bf3856ad364e35~amd64~~6.0.1.1

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2378111~31bf3856ad364e35~amd64~~6.0.1.3

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2387149~31bf3856ad364e35~amd64~~6.0.1.1

    .

    .

    .

    HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.web.administration-nonmsil_31bf3856ad364e35_0.0.0.0_none_ec4ac8ced9014346

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.web.manag..spnetclient-nonmsil_31bf3856ad364e35_0.0.0.0_none_9de5b22af273b2e1

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.web.manag..t.iisclient-nonmsil_31bf3856ad364e35_0.0.0.0_none_065d04dcb69501a3

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.web.management-nonmsil_31bf3856ad364e35_0.0.0.0_none_4b3bee7b637357bf

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.web.management.aspnet-nonmsil_31bf3856ad364e35_0.0.0.0_none_483c82fb6ff11cf2

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.web.management.iis-nonmsil_31bf3856ad364e35_0.0.0.0_none_394b14a96e21aa52

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.0.0_ar-sa_bd6b838d33cf443e

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.0.0_bg-bg_63ab6516244f9595

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.0.0_cs-cz_0eb4dbb111d771c0

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.0.0_da-dk_abeebbd8081d6dbf

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.0.0_de-de_a91a511409f3c259

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.0.0_el-gr_51b07ea6f9092ae7

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.0.0_en-us_520b270cf8d1ce1e

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.0.0_es-es_51d683f0f8f8bfc3

    .

    .

    .

    HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-8-SP1-Update~31bf3856ad364e35~amd64~~8.0.6001.18702\Owners

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-Package-MiniLP~31bf3856ad364e35~amd64~en-US~9.1.8112.16421

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-Package-MiniLP~31bf3856ad364e35~amd64~en-US~9.1.8112.16421\Owners

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-Package-TopLevel~31bf3856ad364e35~amd64~~9.1.8112.16421

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-Package-TopLevel~31bf3856ad364e35~amd64~~9.1.8112.16421\Owners

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~en-US~9.1.8112.16421

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~en-US~9.1.8112.16421\Owners

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~9.1.8112.16421

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~9.1.8112.16421\Owners

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-VistaPlus-Update~31bf3856ad364e35~amd64~~9.1.8112.16421

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-VistaPlus-Update~31bf3856ad364e35~amd64~~9.1.8112.16421\Owners

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-VistaSP1Only-Update~31bf3856ad364e35~amd64~~9.1.8112.16421

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-InternetExplorer-VistaSP1Only-Update~31bf3856ad364e35~amd64~~9.1.8112.16421\Owners

    .

    .

    .

    and at the very end of this file:

    HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\WUClient-SelfUpdate-Core~31bf3856ad364e35~amd64~~7.4.7600.226\Owners

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Retry Agent

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Sqm

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Sqm\Package_for_KB955430~31bf3856ad364e35~amd64~~6.0.1.18005

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Sqm\Package_for_KB955430~31bf3856ad364e35~amd64~~6.0.1.18005\InstallCounter

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Sqm\VistaSP2-KB948465~31bf3856ad364e35~amd64~~6.0.0.18005

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Sqm\VistaSP2-KB948465~31bf3856ad364e35~amd64~~6.0.0.18005\InstallCounter

       HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Version

    Was this answer helpful?

    0 comments
  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  3. Anonymous
    2011-11-26T06:54:51+00:00

    The error code 0x80070005 is also described as ACCESS DENIED.

    I get this please help:

    Error opening HKLM\software\Microsoft\Windows\CurrentVersion\Component Based Servicing:

    Access is denied.

    No matching objects found.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2011-11-23T22:03:46+00:00

    Hi Al,

     

    That's very odd.  The only groups/user that should have full control is SYSTEM and the Adminstrators group.    Futhermore, it's very unusual that Windows update is trying to write to the root of your C: drive.  I'm suspecting that there is more to it.

     

    Do you know which update (specifically) is causing the error that you have described?

     

    Just to be sure - You're getting the error 0x80070522 when checking for updates on a Windows 7 machine - is this correcT?

     

     

    Yes, that is CORRECT the error is "Error 0x80070522: A required privilege is not held by the client".  I cannot write or paste a file to the root of C Drive.  I can paste or create a new file in any of the existing folders but not on the root.

    I do not know that it was a "windows update" but I do know it wasn't a problem until I installed Windows Security Essentials and it changed the status of my update policy for the computer.  As I stated before, I don't do windows updates other than the Service Pack upgrades.  I have had issues before with a 2k system where the update disabled the drag and drop feature of the system.  I was never able to get that system back to the place it was before the Microsoft update that went wrong.

    I have spent many hours researching this and still no answers.  Is there someone at Microsoft that knows what causes this error on windows 7?

    Al Berger

    Was this answer helpful?

    0 comments