Microsoft Store: “You need administrator privileges to pause updates” on Windows 11 Pro 25H2

All these errors / alerts are Store-related (opening store, checking updates in Store manually...) are not normal every time I guess, even through different clean reinstalls and whatever:

STORE OPENEN + CONTROLEREN OP UPDATES....

Call to AllowSetForegroundWindow failed. Install may not be able to bring its window to the foreground. | System.UnauthorizedAccessException 0x80070005: Arg_UnauthorizedAccessException
Exception Details: System.UnauthorizedAccessException
Function: Create
Source: .\src\Core\WinStore.Core\Acquisition\PackageManager\WpmInstallerShim.cs (86)

Missing required query parameter: intent. Data source URI: https://storeedge.microsoft.com/v9.0/recommendations/collections/secondaryli?market=BE&locale=nl-BE&mediaType=Apps&architecture=x64&deviceFamily=Windows.Desktop&pageSize=15&intent=[SECONDARY_INTENT]&cardsEnabled=true&smode=false&deviceFamilyVersion=2814751484149760
Function: EnsureRequiredQueryParameters
Source: .\src\Core\WinStore.Core\DataModel\DataSources.cs (1311)

Failed to load product list https://storeedge.microsoft.com/v9.0/recommendations/collections/secondaryli?market=BE&locale=nl-BE&mediaType=Apps&architecture=x64&deviceFamily=Windows.Desktop&pageSize=15&intent=[SECONDARY_INTENT]&cardsEnabled=true&smode=false&deviceFamilyVersion=2814751484149760. Hiding control. | WinStore.DataModel.DataUnavailableException 0x8057000B: Missing required query parameter: intent. Data source URI: https://storeedge.microsoft.com/v9.0/recommendations/collections/secondaryli?market=BE&locale=nl-BE&mediaType=Apps&architecture=x64&deviceFamily=Windows.Desktop&pageSize=15&intent=[SECONDARY_INTENT]&cardsEnabled=true&smode=false&deviceFamilyVersion=2814751484149760
Exception Details: WinStore.DataModel.DataUnavailableException
Function: OnDataSourceUpdatedAsync
Source: .\src\Core\WinStore.ViewModels\Browse\ProductTileListViewModel.cs (433)

Missing required query parameter: intent. Data source URI: https://storeedge.microsoft.com/v9.0/recommendations/collections/primaryli?market=BE&locale=nl-BE&mediaType=Apps&architecture=x64&deviceFamily=Windows.Desktop&pageSize=15&intent=[PRIMARY_INTENT]&cardsEnabled=true&smode=false&deviceFamilyVersion=2814751484149760
Function: EnsureRequiredQueryParameters
Source: .\src\Core\WinStore.Core\DataModel\DataSources.cs (1311)

Failed to locate command "/pages/home?market={marketCode}&locale={localeCode}&deviceFamily={deviceFamily}&appVersion={appVersion}&hydrateCount={hydrateCount}&deviceFamilyVersion={deviceFamilyVersion}" for object of type NavItem
Error Code: Unknown HResult Error code: 0x80000000
Function: GetCommand
Source: .\src\Core\WinStore.Core\DataModel\CommandHelper.cs (61)

DMProcessConfigXMLFiltered failed with code=-2147467259
Function: IsPrivateStoreCMPolicyEnabled
Source: .\src\Core\WinStore.Core\Settings\PrivateStoreHelper.cs (117)

TaskScheduler.UnobservedTaskException: "Data request returned with null data: https://storeedge.microsoft.com/v9.0/callerspecificdata/?market=BE&locale=nl-BE&appversion=22608.1401.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814751484159310&catalogLocales=nl-BE&pzn=0&preciseAppVersion=22608.1401.3.0&preciseDeviceFamilyVersion=2814751484159310&mfg=Micro-Star+International+Co.0C+Ltd.&model=MS-7E28&skipLifeline=false&cloudXamlVersion=1.21.0&deviceId=s:11AAB441-9BB9-4E60-BBD0-0E438E4FFB98&architecture=x64&isFirstSession=False&firstLaunchTime=1789927567&isCopilotPlusPC=false&deviceForm=Unknown". | WinStore.DataModel.DataUnavailableException 0x8057000B: Data request returned with null data: https://storeedge.microsoft.com/v9.0/callerspecificdata/?market=BE&locale=nl-BE&appversion=22608.1401.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814751484159310&catalogLocales=nl-BE&pzn=0&preciseAppVersion=22608.1401.3.0&preciseDeviceFamilyVersion=2814751484159310&mfg=Micro-Star+International+Co.0C+Ltd.&model=MS-7E28&skipLifeline=false&cloudXamlVersion=1.21.0&deviceId=s:11AAB441-9BB9-4E60-BBD0-0E438E4FFB98&architecture=x64&isFirstSession=False&firstLaunchTime=1789927567&isCopilotPlusPC=false&deviceForm=Unknown
Exception Details: WinStore.DataModel.DataUnavailableException
Function: 
Source:  (0)
Couldn't preload raw data for Slot with dataSource: 'https://storeedge.microsoft.com/v9.0/recommendations/collections/secondaryli?market=BE&locale=nl-BE&mediaType=Apps&architecture=x64&deviceFamily=Windows.Desktop&pageSize=15&intent=[SECONDARY_INTENT]&cardsEnabled=true'. | WinStore.DataModel.DataUnavailableException 0x8057000B: Missing required query parameter: intent. Data source URI: https://storeedge.microsoft.com/v9.0/recommendations/collections/secondaryli?market=BE&locale=nl-BE&mediaType=Apps&architecture=x64&deviceFamily=Windows.Desktop&pageSize=15&intent=[SECONDARY_INTENT]&cardsEnabled=true&smode=false&deviceFamilyVersion=2814751484149760
Exception Details: WinStore.DataModel.DataUnavailableException
Function: LoadRawDataAsync
Source: .\src\Shell\WinStore.App\UX\PresentationManifest\SlotExtensions.cs (64)

Failed to load product list https://storeedge.microsoft.com/v9.0/recommendations/collections/primaryli?market=BE&locale=nl-BE&mediaType=Apps&architecture=x64&deviceFamily=Windows.Desktop&pageSize=15&intent=[PRIMARY_INTENT]&cardsEnabled=true&smode=false&deviceFamilyVersion=2814751484149760. Hiding control. | WinStore.DataModel.DataUnavailableException 0x8057000B: Missing required query parameter: intent. Data source URI: https://storeedge.microsoft.com/v9.0/recommendations/collections/primaryli?market=BE&locale=nl-BE&mediaType=Apps&architecture=x64&deviceFamily=Windows.Desktop&pageSize=15&intent=[PRIMARY_INTENT]&cardsEnabled=true&smode=false&deviceFamilyVersion=2814751484149760
Exception Details: WinStore.DataModel.DataUnavailableException
Function: OnDataSourceUpdatedAsync
Source: .\src\Core\WinStore.ViewModels\Browse\ProductTileListViewModel.cs (433)

DMProcessConfigXMLFiltered failed with code=-2147467259
Function: IsPrivateStoreCMPolicyEnabled
Source: .\src\Core\WinStore.Core\Settings\PrivateStoreHelper.cs (117)

[PluginProxy] ActivatePlugin: no package full name from Add(), using fallback
Function: long __cdecl PluginDependency::ActivatePlugin(void **,class std::shared_ptr<class LoadedPlugin> &) noexcept
Source: D:\a\_work\1\s\Src\Service\StoreService.PluginProxy\PluginDependency.cpp (452)

[PluginProxy] Add: no dependency ID (Create failed), skipping
Function: void __cdecl PluginDependency::Add(void) noexcept
Source: D:\a\_work\1\s\Src\Service\StoreService.PluginProxy\PluginDependency.cpp (53)

TaskScheduler.UnobservedTaskException: "Data request returned with null data: https://cdn.storeedgefd.dsx.mp.microsoft.com/assets/f1/f5/f1f59879-679a-43c6-b17b-f8068103574f.zip?n=PersonalizeHeaderModule-c7d3dc6e.zip". | WinStore.DataModel.DataUnavailableException 0x8057000B: Data request returned with null data: https://cdn.storeedgefd.dsx.mp.microsoft.com/assets/f1/f5/f1f59879-679a-43c6-b17b-f8068103574f.zip?n=PersonalizeHeaderModule-c7d3dc6e.zip
Exception Details: WinStore.DataModel.DataUnavailableException
Function: 
Source:  (0)
Failed to locate command "/pages/home?market={marketCode}&locale={localeCode}&deviceFamily={deviceFamily}&appVersion={appVersion}&hydrateCount={hydrateCount}&deviceFamilyVersion={deviceFamilyVersion}" for object of type NavItem
Error Code: Unknown HResult Error code: 0x80000000
Function: GetCommand
Source: .\src\Core\WinStore.Core\DataModel\CommandHelper.cs (61)

[InstallServicePlugin] ScanForAllUpdates not implemented, CV=8Afmc1uHk06XeadwxvJxEg.65.0
Function: ScanForAllUpdates
Source: .\src\Service\StoreService.InstallServicePlugin\ServicePlugin.cs (566)

Exception while processing installed pfns:  
Fout: Unknown HResult Error code: 0x803fb112
Functie: ScanForAllUpdates
Bron: onecoreuap\enduser\winstore\installservice\libqueue2\uwainstallworkbridge.cpp (1391)

[PluginProxy] ActivatePlugin: no package full name from Add(), using fallback
Function: long __cdecl PluginDependency::ActivatePlugin(void **,class std::shared_ptr<class LoadedPlugin> &) noexcept
Source: D:\a\_work\1\s\Src\Service\StoreService.PluginProxy\PluginDependency.cpp (452)

[PluginProxy] Add: no dependency ID (Create failed), skipping
Function: void __cdecl PluginDependency::Add(void) noexcept
Source: D:\a\_work\1\s\Src\Service\StoreService.PluginProxy\PluginDependency.cpp (53)

[PluginProxy] Create: TryCreatePackageDependency failed, will use fallback
Function: void __cdecl PluginDependency::Create(void) noexcept
Source: D:\a\_work\1\s\Src\Service\StoreService.PluginProxy\PluginDependency.cpp (45)

Error while reading DirectDownloadReplacementSettings from OneSettings cache, value will remain empty
Fout: Unknown HResult Error code: 0xefffffff
Functie: DoInitializeOneSettingsConfiguration
Bron: onecoreuap\enduser\winstore\installservice\lib\settings.cpp (1379)

Failed to recover work from checkpoint. PackageFamilyName = MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy, cv = Sq+6llUv2UCxdf3O.1.6, HRESULT = 0x80240024 
Fout: De bewerking is voltooid.
Functie: InstallQueue2::_LoadCheckpointsWorker
Bron: onecoreuap\enduser\winstore\installservice\libqueue2\installqueue2.cpp (5410)

Error creating work item 
Fout: Unknown HResult Error code: 0x80240024
Functie: UWAInstallServiceWorkItem::UWAInstallServiceWorkItem
Bron: onecoreuap\enduser\winstore\installservice\libqueue2\uwainstallworkbridge.cpp (652)

[Error] Creating UWA Work FulfillmentData = {"ProductId":"9MSSGKG348SP","WuBundleId":"31c55a40-85e8-4246-b680-5358d39291f7","WuCategoryId":"ea6a8ec8-24bf-48a3-b0f0-a86a6447c0e2","PackageFamilyName":"MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy","SkuId":"0010","Content":null,"PackageFeatures":null}  
Fout: De bewerking is voltooid.
Functie: UWAInstallServiceWorkItem::UWAInstallServiceWorkItem
Bron: onecoreuap\enduser\winstore\installservice\libqueue2\uwainstallworkbridge.cpp (494)

Failure detected
Fout: Unknown HResult Error code: 0x80240024
Functie: 
Bron: onecoreuap\enduser\winstore\installservice\libqueue2\uwainstallworkbridge.cpp (569)

Failed to locate command "/pages/home?market={marketCode}&locale={localeCode}&deviceFamily={deviceFamily}&appVersion={appVersion}&hydrateCount={hydrateCount}&deviceFamilyVersion={deviceFamilyVersion}" for object of type NavItem
Error Code: Unknown HResult Error code: 0x80000000
Function: GetCommand
Source: .\src\Core\WinStore.Core\DataModel\CommandHelper.cs (61)

DMProcessConfigXMLFiltered failed with code=-2147467259
Function: IsPrivateStoreCMPolicyEnabled
Source: .\src\Core\WinStore.Core\Settings\PrivateStoreHelper.cs (117)

InstallService InProc Caller. Current Thread not impersonating. Using current process (LocalSystem)
Fout: Unknown HResult Error code: 0xefffffff
Functie: CallerContext::_getCallerToken
Bron: onecoreuap\enduser\winstore\installservice\lib\callercontext.cpp (92) 

Error while reading DirectDownloadReplacementSettings from OneSettings cache, value will remain empty
Fout: Unknown HResult Error code: 0xefffffff
Functie: DoInitializeOneSettingsConfiguration
Bron: onecoreuap\enduser\winstore\installservice\lib\settings.cpp (1379)

WORKAROUND / UPDATE

I eventually found a workaround that fixed the Store pause function for me:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\InstallService
→ Permissions → Users → enable “Full Control”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\InstallService\State
→ Permissions → Users → enable “Full Control”

After changing those permissions in Regedit while signed in with my normal user account, I could immediately pause Microsoft Store updates without any error. I did not even have to select a pause duration first.

There is another important detail that may help explain what is happening. If I enable and sign in to the built-in Windows Administrator account, without linking it to my Microsoft account, pausing Store updates works normally without changing these registry permissions.

My normal Microsoft-linked account and the built-in Administrator account both have administrative privileges, but they do not run applications with exactly the same effective security token under UAC. A normal administrator account normally runs applications such as Microsoft Store with a filtered, non-elevated token until elevation is explicitly required, while the built-in Administrator account can behave differently depending on Admin Approval Mode.

That may explain why the Store operation succeeds under the built-in Administrator account but receives Access denied under my normal administrator account.

However, that does NOT explain the actual regression.

The same personal Microsoft-account setup worked normally for years, and this problem only started appearing recently. It also returns after clean Windows installations. Therefore, UAC behavior by itself cannot explain why Store / InstallService suddenly no longer has the effective permissions it previously had.

This makes me suspect a regression somewhere in the interaction between Microsoft Store, InstallService, UAC/effective permissions, or the default permissions applied to the InstallService registry keys. I cannot confirm which component is responsible.

In my case:

• My normal Microsoft-linked account is correctly a member of Administrators.
• Store / InstallService still receives Access denied for the pause-update operation.
• The built-in Administrator account does not have the same problem.
• Granting Users Full Control on the two affected InstallService registry keys immediately makes the pause function work again.
• The issue returns after clean Windows installations.
• The registry workaround only fixes this specific Store pause problem.
• Other Store / Store-SDK / InstallService / LiveID / CloudStore errors remain present and are not fixed by this workaround.

Because of that, I consider the registry change a workaround and diagnostic clue, not a permanent fix. Windows should not require users to manually grant broad write permissions to system registry keys just to use a normal Microsoft Store function.

The other Store / InstallService / LiveID / CloudStore errors may or may not share the same root cause. I am including them for reference because they may help Microsoft correlate what changed, but I do not want to claim that they are all caused by the same bug without evidence.

If you have the same error, it may be worth checking the effective permissions on those two InstallService registry keys and comparing your Store / InstallService logs with the ones in that thread.

For Microsoft, I think the important part is to reproduce this on a clean Windows installation and compare:

1. a normal Microsoft-linked administrator account;
2. a normal local administrator account;
3. the built-in Administrator account;
4. the effective access tokens and integrity levels used by Microsoft Store / InstallService;
5. the default ACLs and ownership of InstallService and InstallService\State;
6. why PauseAutoUpdateAsync receives Access denied;
7. which Windows / Store / InstallService component creates or restores these permissions during setup and servicing;
8. whether a recent Windows, Store, InstallService or account/security change altered the expected permissions or token handling.

Until Microsoft identifies the underlying cause, I would treat the registry permission change only as a temporary workaround.

If you can reproduce the same behavior, it is worth reporting it through Feedback Hub as well and including the exact Store / InstallService errors and reproduction steps so Microsoft has more comparable reports.

Thank you for the exceptionally detailed troubleshooting and diagnostics, Mathieu De Ruyck,

I have also found a few reports on different platforms (Microsoft Q&A, Windows forum, Reddit, etc.) of the same behavior, that pausing Store updates required admin privileges while the account is already an administrator. However, so far there's no official confirmation on this specific issue yet.

Realistically, Microsoft Q&A is just a community forum and contributors do not have the internal diagnostic resources needed to determine whether this is a Store/InstallService defect or identify which build introduced it. This needs investigation of the Microsoft Store/InstallService behavior itself:

1. Press Win + F to open Feedback Hub > Report the Microsoft Store issue
2. Reproduce while recording the problem if that option is available.
3. Include all the details you have shared above in the post.
4. Emphasize the fact that it's reproducible after a clean installation.
5. Provide your current build and rough time when you first encountered it
6. Include the additional CloudStore, LiveID, OneSettings,... as supporting evidence.

There is also currently not enough evidence to attribute this specifically to a particular 25H2 cumulative update. However, given that you have already tried multiple recommended solutions, and the issue can be reproduced even after a clean installation, further end-user repair steps are unlikely to provide useful information.

While posting here may help attract others who have observed similar behavior, it is unlikely that the thread itself will reach the Windows engineering team soon. Since you already have detailed testing and diagnostic logs, this should be useful for investigation if submitted through the correct channel.