If Windows Recovery Environment (WinRE) reports Access is denied after bootrec /fixboot, rebuild the boot files with BCDBOOT after confirming the correct Windows and system-partition letters. The message does not identify one universal fault: WinRE may be using different drive letters, the boot files may be missing or damaged, or the command may not match the computer’s UEFI/GPT or BIOS/MBR layout.
The safe sequence is to enter WinRE, map the volumes, run only the BOOTREC repairs that fit the problem, use BCDBOOT with the verified volumes, then restart. Do not format, delete, or recreate an EFI or system partition until the disk layout and required data have been confirmed.
As an Amazon Associate I earn from qualifying purchases.
What the error means
BOOTREC is a recovery command-line tool. Its switches repair different parts of the startup chain:
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →| Command | What it repairs or does | When it is relevant |
|---|---|---|
bootrec /fixmbr |
Writes Windows-compatible master boot code to the disk’s master boot record. | Boot code on an MBR-style disk is damaged or replaced. |
bootrec /fixboot |
Writes new boot-sector code to the selected system volume. | The boot sector is damaged, but the correct system volume is accessible. |
bootrec /rebuildbcd |
Scans for Windows installations and rebuilds the Boot Configuration Data store. | The BCD is missing, damaged, or no longer lists the installed Windows copy. |
Access is denied from /fixboot means that this particular write operation did not complete. It is not, by itself, proof that the Windows installation is gone or that the disk must be erased. Microsoft’s recovery workflow supports recreating the boot files with BCDBOOT when they are missing or damaged, so a denied /fixboot operation does not mean you should keep repeating the same command.
#1 Best Overall
- [Win OS Install or reinstall] — Boot from the USB to install or reinstall Win 11, 10, or 7 Home & Pro editions. Includes OS installations and reinstallations media plus WinPE Utility Suite.
- [WinPE Repair & Recovery Tools] — Boot into the included WinPE utility suite to backup system and important files, troubleshoot startup problems, repair boot issues, recover data, recover Win User accounts password, and diagnose common PC problems.
- [All-in-One PC Rescue USB] — Combines Win 11, 10, and 7 installation media with PC repair, recovery, and diagnostic tools on one bootable 64GB USB drive, helping you troubleshoot and restore a computer without needing multiple discs or downloads.
- [Support] — Full instructions are included in packaging plus a printable copy of the instructions with troubleshooting information on the device. Also, a video “How to boot from a bootable USB drive.mp4” to help guide you through starting a PC from a USB drive. If you need help using the USB please contact us for assistance, we are here to help.
- [Video] - If you are new to booting from a USB drive or need a refresher see our video "How to boot from USB drive" both in description and on USB device.
Prepare before making changes
- Protect important data. Recovery commands are designed to repair startup information, but selecting the wrong volume in DiskPart can affect the wrong partition. If the drive can be connected to another working PC, copy irreplaceable files first.
- Have the BitLocker recovery key available. An encrypted Windows volume may require its recovery key before WinRE can access it or before recovery actions can proceed.
- Disconnect unnecessary external drives. Leave the Windows disk and, if needed, the installation USB connected. Extra disks can make volume identification harder.
- Know how the PC normally boots. UEFI/GPT installations commonly use an EFI System Partition, while BIOS/MBR installations use master boot code and a different system-volume arrangement. Do not change firmware mode merely because a command failed.
- Use a stable power source. A shutdown while boot files are being written can leave startup information incomplete.
Enter Windows Recovery Environment
WinRE provides the Command Prompt in which BOOTREC and BCDBOOT run. Use whichever route is available.
From the installed recovery options
- Start the PC and, if Windows reaches the sign-in screen or desktop, open Settings → System → Recovery → Advanced startup → Restart now on Windows 11. On Windows 10, use Settings → Update & Security → Recovery → Advanced startup → Restart now.
- Choose Troubleshoot → Advanced options → Command Prompt.
If Windows fails repeatedly, Automatic Repair may open WinRE by itself. Select Advanced options, then follow the same Troubleshoot → Advanced options → Command Prompt path.
From Windows installation media
- Connect a Windows installation USB or DVD and boot the PC from it. The one-time boot-menu key varies by manufacturer.
- At Windows Setup, choose the language and keyboard options, then select Repair my PC rather than Install now.
- Open Troubleshoot → Advanced options → Command Prompt.
Installation media is useful when the installed WinRE partition is inaccessible. It does not change the installed Windows files unless you deliberately choose an installation or formatting option.
Find the correct Windows and system volumes
Drive letters in WinRE are not guaranteed to match the letters you see during a normal Windows session. Running BCDBOOT against the wrong letter can produce another error or write startup files to the wrong volume, so verify both locations first.
Locate the Windows directory
- At Command Prompt, enter
diskpart, thenlist vol. Note each volume’s number, size, file system, and label. - Enter
exitto leave DiskPart. Test likely letters one at a time, for exampledir C:Windows,dir D:Windows, anddir E:Windows. - The correct OS drive is the one that shows the installed Windows directory and normal subfolders such as
System32. Do not assume it isC:.
Locate the system or EFI partition
Run diskpart and list vol again if necessary. On a UEFI/GPT installation, look for the small FAT32 EFI System Partition. It may have no drive letter. On a BIOS/MBR installation, look for the system-reserved or other system volume that contains the boot files; its file system and size can differ from an EFI partition. The labels and sizes are clues, not permission to guess.
Rank #2
- Emergency Boot USB compatible with Windows 98, 2000, XP, Vista, 7, and 10. It has never ben so easy to repair a hard drive or recover lost files
- Plug and Play type usb - Just boot up the usb and then follow the onscreen instructions for ease of use
- Boots up any PC or Laptop model and brand.
- Virus and Malware Removal made easy for you
- This is your one stop shop for PC Repair of any need!
- In DiskPart, select only the volume you have positively identified:
select vol <number>. - If it has no letter and you need to address it, assign a temporary one such as
assign letter=S. - Enter
exit. The letter you assigned is valid for the current recovery session; record it so the BCDBOOT command uses the same letter.
If the volume contents or layout do not make sense, stop and inspect the disk from another recovery tool or a qualified technician. Do not use clean, format, delete partition, or similar DiskPart commands as a trial fix.
Run the applicable BOOTREC commands
Run these commands from the WinRE Command Prompt, not from a normal Windows terminal. The switches address different layers, so use the ones that match the symptom instead of treating every switch as mandatory.
Repair master boot code on an MBR-style installation
Enter:
bootrec /fixmbr
This targets master boot code. It is relevant to a BIOS/MBR arrangement; it is not a substitute for recreating EFI boot files on a UEFI/GPT installation.
Try the boot-sector repair once
Enter:
bootrec /fixboot
If it completes, continue with the BCD check below if startup still fails. If it immediately returns Access is denied, do not repeatedly rerun it. Proceed to BCDBOOT after confirming the OS and system-volume letters.
Rebuild the Boot Configuration Data store
Enter:
bootrec /rebuildbcd
Allow the scan to identify the Windows installation only when the displayed path is the one you verified. If the scan finds no installation, that can indicate a wrong OS letter, an inaccessible encrypted volume, or damaged boot information; use the checks in the troubleshooting section rather than adding an unverified entry.
Rank #3
- COMPATIBILITY: Designed for both Windows 11 Professional and Home editions, this 16GB USB drive provides essential system recovery and repair tools
- FUNCTIONALITY: Helps resolve common issues like slow performance, Windows not loading, black screens, or blue screens through repair and recovery options
- BOOT SUPPORT: UEFI-compliant drive ensures proper system booting across various computer makes and models with 64-bit architecture
- COMPLETE PACKAGE: Includes detailed instructions for system recovery, repair procedures, and proper boot setup for different computer configurations
- RECOVERY FEATURES: Offers multiple recovery options including system repair, fresh installation, system restore, and data recovery tools for Windows 11
Use BCDBOOT when /FIXBOOT is denied
BCDBOOT copies boot files from a selected Windows directory to a selected system volume and creates the required boot configuration. Microsoft’s documented pattern is:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
bcdboot <OSDrive>:Windows /s <SystemDrive>: /f ALL
For example, Microsoft shows:
bcdboot D:Windows /s R: /f ALL
In that example, D: is the Windows volume and R: is the system volume. Those letters are examples only. Substitute the letters you verified on the affected PC.
- Identify the OS drive again with
dir <letter>:Windows. - Identify the system or EFI volume with
diskpartandlist vol. If it has no letter, select it and assign a temporary letter, such asS. - Run the command with your verified letters, for example
bcdboot D:Windows /s S: /f ALL. - Wait for the command to report that the boot files were successfully created. If it reports a failure copying boot files, stop and recheck that the OS letter points to the real Windows folder and that the system letter points to the intended system/EFI volume.
- Do not format the system volume to force the command through. A formatting decision requires confirmed partition boundaries, a backup, and a clear understanding of whether the PC uses UEFI/GPT or BIOS/MBR.
The /f ALL option writes boot files for both supported firmware types. It is useful when the exact firmware target needs to be covered, but it does not correct a physically wrong volume selection or an incompatible firmware configuration.
Restart and test the result
- Close Command Prompt with
exit. - Choose Continue to boot Windows, or shut down and remove the installation USB so the PC starts from its internal disk.
- If Windows starts, verify that the normal Windows volume and recovery options are intact. Do not remove the temporary system-volume letter until you have confirmed startup; it can be removed later from Disk Management in Windows if desired.
- If startup still fails, return to Troubleshoot → Advanced options and try Startup Repair. It is a separate automated recovery option and may address startup conditions that BOOTREC does not.
Troubleshooting branches
BCDBOOT says it cannot copy boot files
The most useful first check is the two paths, not another destructive command. Confirm that <OSDrive>:Windows contains the installation you want and that the system letter identifies the intended EFI or system volume. On UEFI/GPT hardware, a FAT32 EFI partition is expected; on BIOS/MBR hardware, the system structure is different. If the volume is encrypted or offline, unlock or make it accessible in WinRE before retrying.
You cannot find any drive containing Windows
Repeat list vol and inspect each plausible volume with dir. WinRE may have assigned letters differently, and the Windows volume may not be the largest one. If every candidate is inaccessible, BitLocker may be waiting for a recovery key, the disk may not be detected correctly, or the installation may be damaged. Do not point BCDBOOT at a recovery, reserved, or installation-media volume simply because it has a familiar letter.
Recommended Free Tools
Rank #4
- Bootable Recovery and Repair Solution: Plug in the USB drive, start your computer from it, and follow clear on-screen instructions
- Works with Secure Boot ✅ ON: Unlike other recovery USBs, PC-DNA works with Secure Boot enabled. No BIOS changes needed
- Always Installs the Latest Official Windows: Downloads genuine Windows 11 or 10 directly from Microsoft. No pirated copies, no outdated ISOs
- ⚠️ PC-DNA does not include a Windows product key. Use your existing Windows license or purchase one separately.
- 💬 US-Based Support: Developed in the United States. Real people via live chat or email, not a bot
The command works but the PC returns to recovery
Check that the firmware is booting the same disk whose files you repaired. A UEFI/GPT installation generally needs its EFI entry and partition; a BIOS/MBR installation uses a different boot path. Review the firmware boot order without switching between UEFI and legacy modes at random. Then rerun the volume identification and confirm that BCDBOOT targeted the installed Windows copy.
BitLocker asks for a recovery key
This is an encryption safeguard, not an indication that /fixboot itself is unsafe. Provide the recovery key when WinRE requests it. Without the key, recovery tools may not be able to read the protected Windows volume, so commands that depend on that volume can fail even when the syntax is correct.
There are multiple Windows installations
Use the directory contents and the installation you intend to start, then accept only that path when /rebuildbcd asks whether to add it. If the machine contains several disks or old Windows folders, verify the disk and volume by size, label, and directory contents before writing boot files.
WinRE itself will not open
Boot from Windows installation media and choose Repair my PC. This supplies a separate recovery environment. If the media does not boot, check the firmware boot menu and recreate the media from a known-good Windows image; do not alter partitions merely because the built-in recovery tools are unavailable.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Quick Recap
Repair choices at a glance
| Situation | First manual action | Important qualification |
|---|---|---|
| Damaged MBR boot code on BIOS/MBR | bootrec /fixmbr |
Does not rebuild an EFI System Partition. |
| Damaged boot-sector code | Try bootrec /fixboot once |
If it returns Access is denied, move to verified BCDBOOT repair. |
| Missing or damaged BCD | bootrec /rebuildbcd or BCDBOOT |
Confirm the Windows directory before adding an installation. |
| Missing or damaged boot files | bcdboot <OSDrive>:Windows /s <SystemDrive>: /f ALL |
Drive letters are examples only; substitute the letters found in WinRE. |
| Installed WinRE unavailable | Use installation media and Repair my PC | Choose repair options, not Windows Setup’s installation path. |
What not to do
- Do not assume
C:is Windows when running in WinRE. - Do not format an EFI or system-reserved partition to clear Access is denied.
- Do not delete or recreate partitions without a confirmed disk map and a backup.
- Do not switch UEFI, legacy, or secure-boot settings repeatedly as a substitute for identifying the installed layout.
- Do not treat a successful command message as proof that every startup component is healthy; restart and test the installed system.
As an optional shortcut after the manual steps, Outbyte PC Repair can address more than 100 common Windows issues where possible and includes tools such as an app-crash log; it runs on Windows 11, 10, 8 and 7. Its category-based free trial lasts at least two days before a paid subscription, it complements antivirus rather than replacing it, and results vary because no tool repairs every crash.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
