Can't run 'sfc /scannow' or 'DISM /Online /Cleanup-Image /RestoreHealth' due to corruption.

Seth 0 Reputation points
2026-09-11T23:31:44.3166667+00:00

I am trying to use the wsl --install to get a version of linux on my windows 11. However, it always fails due to Error 1009, saying 'The configuration registry database is corrupt.' So I tried to run 'sfc /scannow', I get 'Windows Resource Protection could not perform the requested operation'. 'DISM /Online /Cleanup-Image /RestoreHealth', same problem. I tried net stopping wuauserv, cryptSvc, bits, and msiserver, renaming C:\Windows\SoftwareDistribution and C:\Windows\System32\catroot2, then starting them again. I tried restarting into safe mode and trying these things again, they didn't work for the same reason. I tried using system recovery in settings to 'Fix problems using Windows Update'. The update succeeded, though it was unable to complete the .NET security framework part. I've attached my dism.log from after I try and run 'DISM /Online /Cleanup-Image /RestoreHealth'. Please help.

Windows for home | Windows 11 | Performance and system failures
0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-09-11T23:31:57.37+00:00

    Since Safe Mode, Windows Update repair, and resetting SoftwareDistribution/catroot2 were already tried, the next supported path is to repair Windows system files and the Windows image in this order from an elevated Command Prompt:

    1. Run: 
         DISM.exe /Online /Cleanup-image /Restorehealth
      Expected result: Command Prompt shows either “The restore operation completed successfully” or “The operation completed successfully.”
    2. Then run: 
         sfc /scannow
      Wait until verification reaches 100%.
    3. Restart the PC and try wsl --install again.

    If sfc /scannow returns “Windows Resource Protection could not perform the requested operation”, run SFC in Safe Mode and make sure these folders exist:

    • %WinDir%\WinSxS\Temp\PendingDeletes
    • %WinDir%\WinSxS\Temp\PendingRenames

    If DISM /RestoreHealth fails because the repair source cannot be found or the source image is affected, provide a valid repair source and run RestoreHealth again. If an install.wim is available, use:

    DISM /Online /Cleanup-Image /RestoreHealth /Source:WIM:c:\install.wim:1 /LimitAccess
sfc /scannow

    If the issue is tied to Windows Update servicing corruption, restart after RestoreHealth, run sfc /scannow, and then retry the update or WSL installation.

    If corruption persists after DISM and SFC, the supported next step for persistent servicing failures is an in-place upgrade. This repairs the servicing stack while preserving applications and data.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. S.Sengupta 32,031 Reputation points MVP Volunteer Moderator
    2026-09-12T00:36:02.69+00:00

    Best option: Repair Windows with an in-place Windows 11 upgrade

    Your log repeatedly shows:

    CBS HRESULT = 0x800703F1

    Failed finalizing changes

    Do a Windows 11 in-place repair upgrade using official Windows 11 installation media.

    This should:

    Repair Windows system components

    Repair the component/servicing infrastructure

    Preserve your personal files

    Preserve your installed applications

    Avoid a clean installation

    Give you a much better chance of fixing the underlying problem preventing wsl --install

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.