The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
If Windows 10 reports “access denied” with the code 0X800707E, first copy the exact code from the error dialog or Windows Update history. That string is often a transcription of Microsoft’s documented update error 0x80070005 (E_ACCESSDENIED), but it can also be confused with 0x8007007e, a narrower WSUS-related code. The correct repair depends on which code you actually have and whether the computer is managed by an organization.
Back up important files and the system disk, then work through the built-in troubleshooter, administrator and connectivity checks, log review, permission repair, Windows Update component reset, and DISM/SFC repairs in that order. Do not change ownership or delete servicing folders until you have verified the code and made a backup.
As an Amazon Associate I earn from qualifying purchases.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsWhat does the Windows 10 access-denied code mean?
Microsoft documents 0x80070005 as the Windows Update HRESULT E_ACCESSDENIED. It appears when the update process cannot access a required file, folder, or registry entry. Servicing resources commonly involved include the Windows component store (WinSxS), SoftwareDistribution, Windows registry keys, and the Windows directory.
The title code 0X800707E is ambiguous because it does not exactly match either of the codes most often associated with this wording. A Microsoft Q&A question used 0x800707e, while the response discussed 0x8007007e and WSUS metadata. Microsoft’s dedicated access-denied guidance covers 0x80070005. Treat the characters shown by your own PC as authoritative.
Popular on Amazon
- Spacious Design: Measuring 21.1" wide and 14.1" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy ergonomic support with the integrated cushioned wrist rest.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a sleek black carbon color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.8 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
| Code or situation | What it points to | Appropriate direction |
|---|---|---|
0x80070005 |
Access denied while Windows Update cannot reach required servicing files, folders, or registry entries | Back up, run the troubleshooter, inspect logs, repair permissions, reset update components, and repair system files |
0x8007007e on a WSUS- or Configuration Manager-managed PC |
A possible stale upgrade-metadata problem described in Microsoft Q&A | Use the WSUS-specific branch only after confirming that the device is centrally managed |
0X800707E as typed or transcribed |
Not enough information to identify the failure safely | Capture the complete dialog, operation, and exact hexadecimal code before changing permissions |
Do not assume that a similar-looking code means the same problem. In particular, advice for a WSUS server or Configuration Manager client can be irrelevant, and potentially disruptive, on a personal computer that gets updates directly from Microsoft.
What should I do before repairing Windows Update permissions?
Preparation prevents a permissions change from turning into a second problem. Microsoft recommends backing up before permission repair, and update troubleshooting guidance also calls for a working administrator account, an online device, and adequate power.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Save important documents and create a backup of the system disk. If the computer is business-managed, follow the organization’s backup and change-control process.
- Photograph or copy the entire error dialog, including the operation that failed, the timestamp, and every digit of the code.
- Note whether the failure occurs in Windows Update, during an in-place Windows upgrade, or while installing a particular package.
- Determine whether the PC is managed by WSUS or Configuration Manager. If it belongs to an employer or school, ask the administrator before clearing update data or changing ownership.
- Connect the PC to the internet, plug it into power, and sign in with an account that can approve administrator prompts. Some updates require administrator access.
How do I run the Windows Update troubleshooter?
The troubleshooter is the least invasive first repair for a normal Windows 10 installation. It can correct common service and configuration conditions without manually changing file ownership.
- Open Start and select Settings.
- Choose Update & Security, then Troubleshoot.
- Select Additional troubleshooters.
- Choose Windows Update and click Run the troubleshooter.
- Apply any recommended correction, restart Windows if requested, and try the update again.
If the troubleshooter reports that it could not identify a problem, continue with the checks below rather than repeatedly running it.
How can I confirm the failed object in Windows Update logs?
Logs can show whether the denial concerns a file, folder, registry operation, or another servicing component. Inspect them before making broad permission changes so you have a timestamp and a more specific target.
Also popular on Amazon
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Windows Update log
Open Windows PowerShell as an administrator and run:
Recommended Free Tools
Get-WindowsUpdateLogWindows creates a readable Windows Update log from the event traces. Match the failure time from the dialog to entries containing “access denied” or the hexadecimal code.
Component servicing log
Review C:WindowsLogsCBSCBS.log in a text editor opened with administrator rights. Search around the failure time for the denied path, package, or registry operation. Do not edit the log; it is evidence for deciding which repair branch applies.
How do I repair servicing-folder permissions safely?
Use an elevated Command Prompt for the following Microsoft procedure. The commands reset inherited permissions on the two servicing folders; they do not replace the system files themselves.
- Open Start, type
Command Prompt, right-click it, and select Run as administrator. Approve the User Account Control prompt. - Run the permission reset commands exactly as shown:
icacls "%windir%WinSxS" /reset /t /c /q
icacls "%windir%SoftwareDistribution" /reset /t /c /q- Restart Windows and retry Windows Update.
- If the same access-denied failure remains, set the owner of the component store to Windows Modules Installer (TrustedInstaller):
icacls "%windir%WinSxS" /setowner "NT SERVICETrustedInstaller" /t /c /q- Restart once more and test the update.
The /t switch applies the operation through subfolders, /c continues when individual items report an error, and /q reduces console output. If the command identifies paths that cannot be changed, record them rather than repeatedly forcing ownership. A damaged ACL, an active security filter, or a managed-device policy may require administrator or IT review.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteAlso popular on Amazon
- Note: Not suitable for MacBooks released after 2023 or devices with a protruding front camera; Not applicable to full-screen or notch-style tempered glass screen protectors; Do not use on the rear camera of the phone.
- 💻 Why Do You Need a Webcam Cover Slide? — Safeguard your privacy by covering your webcam with our reliable webcam cover when not in use. Don't let anyone secretly watch you. Stay protected!
- ✅ Thin & Stylish — Enhance your laptop's functionality and aesthetics with our 0.027" ultra-thin webcam covers. Seamlessly close your laptop while adding a touch of sophistication.
- ✅ Fits Most Devices — Compatible with laptops, phones, tablets, desktops! Keep your privacy intact on Ap/ple, Mac/Book, iPh/one, iP/ad, H/P, L/novo, De/ll, Ac/er, As/us, Sa/msung devices.
- ✅ 365 Days Protection — Our upgraded 3.0 adhesive ensures a strong hold that won't damage your equipment. Experience reliable, long-term privacy protection day in and day out.
How do I reset Windows Update components?
A damaged or locked update cache can preserve the denial after permissions are corrected. Resetting the service cache renames the existing folders so Windows can create fresh ones; it does not alter personal folders elsewhere on the disk.
- Open an elevated Command Prompt.
- Stop the update services and rename their caches:
net stop wuauserv
net stop bits
net stop cryptSvc
ren %windir%SoftwareDistribution SoftwareDistribution.old
ren %windir%System32catroot2 catroot2.old- Start the services again:
net start cryptSvc
net start bits
net start wuauserv- Restart Windows and check for updates.
If a net stop command says the service is not running, continue with the remaining commands. If a rename says the destination already exists, do not overwrite it; choose a different backup name after confirming that the original service is stopped.
How do DISM and SFC repair an access-denied update failure?
When the component store or protected system files are inconsistent, Windows Update may fail even though the folder ACLs look normal. DISM repairs the online Windows image; System File Checker then validates protected files against that repaired image.
- In an elevated Command Prompt, run:
DISM /Online /Cleanup-Image /RestoreHealth- Wait for DISM to finish. Interrupting it can leave the repair incomplete.
- Run System File Checker:
sfc /scannow- Restart the PC after both commands complete, then retry Windows Update.
SFC may report that it found and repaired files, found corruption it could not repair, or found no integrity violations. Those messages describe the file-check result; they do not prove that the original access denial was caused by malware or by a single damaged file.
Could security software or a filter driver be blocking the update?
Third-party security products and file-system filter drivers can intercept servicing operations. Microsoft’s access-denied guidance recommends investigating this possibility when permissions and component repairs do not resolve the failure.
Also popular on Amazon
- Anti-Slip Surface - Transform your laptop into a mobile workstation with the AboveTEK portable laptop lap desk. The anti-slip surface provides a strong grip for laptops up to 15.6 inches(Diagonal), while the double rubber strip on the bottom ensures a stable display or typing experience on your lap, couch, or bed.
- Retractable Mouse Pad - Retractable laptop mouse pad extends on both directions for the left/right handed with elevation along the edges for stopping mouse from falling off. The size of laptop tray is 14" X 9.7" and the size of mouse pad is 7.4" X 6.1".
- Effective Heat Shield - The effective heat shield made of sturdy and thick material protects your laptop from overheating. Prioritizes your comfort and safety, an ideal lap pad or board for working anywhere.
- EASY to Carry and Store - With an ergonomic and simplistic design, the lap desk is portable to store in a backpack. Only 15" in size, 2.2 lb of weight and with slim 0.6 inch thickness, it is ready to be easily carried around.
- Widely Applicable - The smooth platform accommodates laptops and tablets up to 15.6 inches(Diagonal), making it a versatile accessory and one of the best gifts for mom, dad, students and professionals. Perfect for use as a laptop bed tray or tablet holder anywhere at home, library, or park.
- Temporarily disable real-time protection only for a controlled diagnostic attempt, using the security product’s documented pause option.
- Immediately retry the update while protection is paused. Do not browse, download files, or perform unrelated work during this test.
- List file-system filter drivers from an elevated Command Prompt:
fltmc- Look for non-Microsoft filters that correspond to antivirus, backup, encryption, or disk-management software. Check the product vendor’s support guidance before removing or changing one.
- Restore real-time protection after the test, whether or not the update succeeds.
A successful update with protection paused indicates interference is possible, not that the security product is defective. Update or reconfigure the product according to its vendor’s instructions instead of leaving protection disabled.
When does the WSUS-specific fix apply?
Use this branch only when the exact code is 0x8007007e and the computer is managed by WSUS or Configuration Manager. Microsoft Q&A describes stale upgrade metadata in that environment; the same symptom is not evidence that every Windows 10 PC has a WSUS problem.
- Confirm management with your organization’s IT administrator and verify the exact code in Windows Update history or the error dialog.
- Have the administrator stop Windows Update and clear the contents of
C:WindowsSoftwareDistributionDataStore. Do not clear unrelated folders. - Restart the Windows Update service, reboot if directed by the administrator, and retry the managed deployment.
On a personal PC that is not managed by WSUS or Configuration Manager, skip this branch and use the general permission, cache, and image-repair sequence instead.
What if Windows Update is still denied after every repair?
Stop making broader permission changes when the documented sequence fails. The remaining cause may be a specific registry ACL, a policy applied by device management, a locked file, a damaged user profile, or a third-party driver that requires targeted analysis.
- Recheck the code and compare the new failure timestamp with
CBS.logand the generated Windows Update log. - Record the exact command output, denied path, service state, and whether the failure changed after each step.
- On a managed computer, provide those records to the administrator rather than deleting more update data.
- On a personal computer, use the recorded path to seek Microsoft support or a qualified Windows technician. Avoid registry-cleaner utilities and blanket ownership changes that are not tied to the denied object.
Keep the backup made at the beginning until the update has installed successfully and the system has completed at least one normal restart.
Also popular on Amazon
- Spacious Design: Measuring 21.1" wide and 12" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy laptop support with the integrated device ledge.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a blush pink color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.14 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
As an optional shortcut after the manual steps, Outbyte PC Repair can address more than 100 common Windows issues, tune settings that affect CPU, RAM and disk load, clean temporary and cache files, check selected Windows settings and missing updates, provide a lightweight potentially unwanted app check, and keep an app-crash log. It runs on Windows 11, 10, 8 and 7; its free trial is offered by category for at least two days before a paid subscription. It complements antivirus software, and results vary—no tool repairs every crash.
Frequently asked questions
Is 0x8007007e the same as 0x80070005?
No. They are different hexadecimal codes. Microsoft documents 0x80070005 as E_ACCESSDENIED, while the 0x8007007e discussion cited here concerns stale metadata in a WSUS-managed scenario.
Will renaming SoftwareDistribution remove my personal files?
The procedure renames the Windows Update cache directory, not user profile folders. Windows creates a new cache directory when the update service runs again, while the renamed folder remains available for troubleshooting until you remove it.
What should I do if icacls reports “Access is denied”?
First verify that Command Prompt was started with Run as administrator and that the path matches the command. If errors persist, save the output, restart, and stop rather than repeatedly forcing ownership; an active filter driver or organizational policy may be protecting the object.
How can I tell whether my PC is managed by WSUS?
Ask the organization that supplied or administers the PC, because management status is controlled by its update policy. If no organization manages the device, do not apply the WSUS metadata-clearing procedure solely because the code resembles 0x8007007e.
Frequently Asked Questions
Is 0x8007007e the same as 0x80070005?
No. They are different hexadecimal codes. Microsoft documents 0x80070005 as E_ACCESSDENIED, while the 0x8007007e discussion cited here concerns stale metadata in a WSUS-managed scenario.
Free tools Windows power users keep installed
One-click scans. No signup required.
Will renaming SoftwareDistribution remove my personal files?
The procedure renames the Windows Update cache directory, not user profile folders. Windows creates a new cache directory when the update service runs again, while the renamed folder remains available for troubleshooting until you remove it.
What should I do if icacls reports “Access is denied”?
First verify that Command Prompt was started with Run as administrator and that the path matches the command. If errors persist, save the output, restart, and stop rather than repeatedly forcing ownership; an active filter driver or organizational policy may be protecting the object.
How can I tell whether my PC is managed by WSUS?
Ask the organization that supplied or administers the PC, because management status is controlled by its update policy. If no organization manages the device, do not apply the WSUS metadata-clearing procedure solely because the code resembles 0x8007007e.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →
