This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Windows 10 home, new computer with CPU Intel 8700K working well, version 1709 installed.
I noticed that windows update gives error 0x80070bc2 when trying to install 2017-11 Cumulative update for Windows Version 1709 for amd64-based systems KB4048955 (and before KB4043961) ... getting a sort of a loop as it requires a restart to finish installing but at any restart gives the same message and does not install.
Tried various things such as sfc scan, dism, troubleshooting windows update, manual install etc. Nothing works. Other updates such as KB4048951 and KB4051613 installed correctly in the last few days. Can someone help?
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
This seems to have worked for me:
SC config wuauserv start= auto
SC config bits start= auto
SC config cryptsvc start= auto
SC config trustedinstaller start= auto
Were you running with Administrator privileges? I was running the PowerShell (Admin) but I was also logged on as a system administrator. Did you use the Services dialogue to see if the four services were still running?
Get 'Access denied' error
I was having a similar problem with Win 10 v. 1709 trying repeatedly to install KB4103727 and failing. I followed the instructions I found on page 1 of this thread, namely, stop the services Background Intelligent Transfer Service (BITS), Cryptographic Services (CryptSvc), Windows Installer (msiserver), and Windows Update (wuauserv), renaming the directories C:\Windows\SoftwareDistribution and C:\Windows\System32\Catroot2 to <x>.old versions. Then restart the services that were previously stopped. Then restart the system and re-try the update.
But I found a few wrinkles, which may just be because of the difference in the version when those instructions were originally written and now. I used PowerShell (Admin) to issue the "net stop" commands for the services, and it said the commands completed successfully. But I couldn't rename the directories. They were still in use. I used the Computer Management -> Services and Applications -> Services screens to find that some of the services had restarted themselves. I tried using the Services screen to right-click and Stop the services. This worked, except for CryptSvc. That one kept restarting immediately and wouldn't release Catroot2. So I opened its Properties dialogue and changed its status to Disabled. Then Stopped it. It DID NOT restart. I was then able to rename Catroot2. Switch CryptSvc's status back to Auto(Delayed), started it and the other three services, and restarted the computer.
After the restart, I went into Settings -> Update & Security. Finally, I saw the "Check for Updates" button. I checked the "View installed update history" and found absolutely nothing listed (of course not, the history was in the directories that I renamed). I clicked on Check for Updates, and it began loading Feature Update 1803! That's success, because I didn't want to update 1709 anyway.
Update 1803 solved all problems with this issue. Nothing else worked. Thank you Microsoft.
