What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
If Windows shows 0x80070422 while Windows Update or Microsoft Defender downloads an update, the usual cause is a disabled or stopped Windows service. The title’s 0x800704022 contains an extra trailing 2; verify the exact code on your screen before changing anything. Start with the Windows Update troubleshooter and the Windows Update service. If the failure is specifically a Defender security-intelligence update, also check which antivirus owns real-time protection and whether a firewall or proxy is blocking Microsoft’s update endpoints. The steps below cover both paths without requiring third-party software.
What does Windows error 0x80070422 mean?
Microsoft labels 0x80070422 as ERROR_SERVICE_DISABLED. In its Windows Client guidance, Microsoft says the issue occurs when the Windows Update service stops working or is not running. That explains why the same code can appear during an ordinary Windows Update installation even when the update package itself is valid.
As an Amazon Associate I earn from qualifying purchases.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteDefender security-intelligence (definition) updates can show the code for a related reason. Microsoft lists 0x80070422 among possible Defender update errors and directs users to check required firewall or proxy access, confirm that Microsoft Defender Antivirus is the primary antivirus, and use a manual update path when the services are running.
Do not treat 0x800704022 as a separate, documented Windows code. It may be a transcription or display-reading error. Copy the code from the error dialog or Windows Security history, then follow the branch below that matches where the failure occurs.
Popular on Amazon
- Dual USB-A & USB-C Bootable Drive – compatible with nearly all Windows PCs, laptops, and tablets (UEFI & Legacy BIOS). Works with Surface devices and all major brands.
- Fully Customizable USB – easily Add, Replace, or Upgrade any compatible bootable ISO app, installer, or utility (clear step-by-step instructions included).
- Complete Windows Repair Toolkit – includes tools to remove viruses, reset passwords, recover lost files, and fix boot errors like BOOTMGR or NTLDR missing.
- Reinstall or Upgrade Windows – perform a clean reinstall of Windows 7 (32bit and 64bit), 10, or 11 (amd64 + arm64) to restore performance and stability. (Windows license not included.). Includes Full Driver Pack – ensures hardware compatibility after installation. Automatically detects and installs drivers for most PCs.
- Premium Hardware & Reliable Support – built with high-quality flash chips for speed and longevity. TECH STORE ON provides responsive customer support within 24 hours.
Which update is failing: Windows Update or Defender?
Identify the screen and the wording before making changes. Windows Update failures normally appear in Settings under Windows Update and refer to downloading or installing a Windows update. A Defender failure appears in Windows Security, Microsoft Defender Antivirus, or a message about protection definitions or security intelligence.
| Failure context | Primary control point | Most useful first action | Escalate when |
|---|---|---|---|
| Windows Update installation | Windows Update service startup state | Run the Windows Update troubleshooter, then inspect the Windows Update service | The service is missing, policy-controlled, or will not start |
| Defender security-intelligence update | Antivirus precedence, service state, and network access | Confirm Defender is the primary antivirus and check firewall or proxy access | Services run but Microsoft update access remains blocked or the service fails immediately |
If both screens report an update problem, repair the Windows Update service first. Defender’s update process depends on working services and network access, so a service that is disabled can affect both experiences.
What should I check before changing services?
Make the low-risk checks first. They prevent you from changing a service when the real problem is a misread code, a disconnected network, or another antivirus product taking over protection.
- Confirm the code is exactly
0x80070422, not0x800704022or a different hexadecimal value. - Note whether the message says Windows Update, protection definition update, or security-intelligence update.
- Confirm the computer has an internet connection. Microsoft’s Windows Update troubleshooting guidance includes connectivity as a prerequisite.
- Use an account with administrator access. The Services console and an elevated command prompt require administrative rights.
- If a third-party antivirus is installed, identify whether it has registered with the Windows Security Center. Do not run two real-time antivirus products together.
How do I run the Windows Update troubleshooter?
On Windows 11, the built-in troubleshooter checks common Windows Update conditions and can apply supported corrections. It is the appropriate first repair for a failure that appears in Windows Update.
- Open Settings.
- Select System, then Troubleshoot.
- Open Other troubleshooters.
- Find Windows Update and select Run.
- Follow the on-screen results. If Windows reports a correction, allow it to finish, restart Windows if requested, and retry the update.
The troubleshooter does not replace the service check. If it reports that the service is disabled, or if the same code returns after the restart, continue with the Services procedure.
How do I start the Windows Update service?
Use the Services console to set Windows Update to start automatically and start it immediately if it is stopped. These changes address the condition represented by ERROR_SERVICE_DISABLED.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors- Press Win+R to open the Run dialog.
- Enter
services.mscand press Enter. Approve the administrator prompt if Windows displays one. - In the list, find Windows Update.
- Double-click it to open Properties.
- Set Startup type to Automatic.
- Check Service status. If it says Stopped, select Start.
- Select Apply, then OK.
- Restart Windows and try the update again.
If the service is already running, do not repeatedly stop and start it. Close the dialog, retry the update once, and then move to the branch that matches the error context. If Windows refuses the startup-type change, record the exact message; a policy or permissions issue may be controlling the service.
What if the failed update is a Microsoft Defender definition update?
Defender security-intelligence updates have two additional dependencies: Microsoft Defender must be the primary antivirus, and the computer must be able to reach Microsoft’s update services through its firewall or proxy.
Check which antivirus owns real-time protection
Microsoft explains that a non-Microsoft antivirus solution using the Windows Security Center (WSC) API disables Microsoft Defender Antivirus. If another product is registered as the active antivirus, Defender may not be the component allowed to perform the update.
Open your security product and follow its documented procedure to make Microsoft Defender the primary antivirus or to hand protection back to Windows. Do not enable two real-time antivirus products at the same time. If you are unsure which product is primary, check the Windows Security provider page and the third-party product’s status panel before changing settings.
Check firewall and proxy access
Microsoft’s Defender troubleshooting guidance calls for checking the required firewall or proxy URLs. A service can be running normally while a network rule blocks the download, producing an update failure that looks like a local service problem.
- Review outbound firewall rules that apply to Windows Security or Defender update traffic.
- Check whether the computer uses an organization-managed proxy and whether that proxy permits Microsoft security-intelligence downloads.
- If a security gateway recently changed, ask its administrator to verify the required Microsoft URLs rather than disabling protection broadly.
- After correcting access, retry the update from Windows Security.
Do not assume that turning off the firewall permanently is a fix. The goal is to allow the documented update endpoints while retaining the protection policy used by the computer.
How can I update Defender manually?
When Defender is the primary antivirus, services are running, and network access is available, Microsoft documents a manual update route. It is useful when the normal Windows Security download repeatedly fails.
- Open an elevated Command Prompt by searching for Command Prompt, choosing Run as administrator, and approving the prompt.
- Change to the current Microsoft Defender platform directory. Microsoft’s Defender guidance shows how to locate the current platform directory on the computer; use that current version rather than an older platform folder.
- Run
MpCmdRun.exe -SignatureUpdate -MMPC. - Wait for the command to finish. Then open Windows Security and check the protection-update status.
The -MMPC option directs the Defender command-line utility to use Microsoft’s update service. If the command reports that the file cannot be found, you are not in the current platform directory; locate the current directory and repeat the command from there. If it reports a network or access error, return to the antivirus-ownership and firewall/proxy checks instead of repeatedly rerunning it.
What should I do if Windows Update or Defender will not start?
A service that is missing, controlled by policy, or failing immediately after an administrator start attempt needs a different level of support than a merely stopped service.
Also popular on Amazon
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]
Capture the exact failure
- Write down the service name shown in Services.
- Record whether Startup type can be changed and whether Start produces an error.
- Keep the complete error text and any accompanying code.
- Note whether the computer is managed by an employer, school, or other organization.
Recognize policy-controlled systems
On a managed computer, an administrator may intentionally control Windows Update, Defender, firewall, or proxy behavior. Repeatedly forcing a startup setting can conflict with that policy. Contact the organization’s administrator with the recorded service error and the update context.
When to seek qualified Windows support
Escalate when the service is absent from the Services list, cannot be started by an administrator, is reverted by policy, or still fails after the service, antivirus, and network checks. Provide the exact code and the steps already attempted so support can distinguish a disabled service from a blocked update endpoint.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Which fix should I try first?
Use the shortest path that matches the screen showing the error. The sequence below keeps service changes, security-provider changes, and network changes separate so you can identify the cause.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →- Verify the code and context. Confirm
0x80070422and identify Windows Update versus Defender security intelligence. - For Windows Update: run the Windows Update troubleshooter, enable and start Windows Update in Services, restart Windows, and retry.
- For Defender updates: first confirm Defender is the primary antivirus, then check firewall or proxy access.
- If Defender still cannot download: use the elevated
MpCmdRun.exe -SignatureUpdate -MMPCcommand from the current Defender platform directory. - Escalate: if a service is missing, policy-controlled, or refuses to start, preserve the exact error and seek qualified support.
These branches avoid treating every 0x80070422 report as the same failure. A Windows Update service problem and a Defender download blocked by antivirus precedence can share the code while requiring different corrections.
As an optional shortcut after trying the manual steps, Outbyte PC Repair can address more than 100 common Windows issues where possible, including broken system elements and shared DLL problems, while also offering settings adjustments, temporary-file cleanup, privacy tools, vulnerability checks, a real-time boost, file shredding, and an app-crash log. It runs on Windows 11, 10, 8, and 7; its free trial is category-based for at least two days before a paid subscription, and it complements an antivirus rather than replacing one. Results vary, and no tool repairs every crash.
Frequently asked questions
Can error 0x80070422 damage my files?
The code identifies a disabled or unavailable service condition; it does not by itself indicate that personal files are damaged. Avoid deleting system folders or changing unrelated registry settings while troubleshooting, because those actions are not part of Microsoft’s documented service and update checks.
Why did a third-party antivirus make Defender stop updating?
When a non-Microsoft antivirus registers through the Windows Security Center API, Windows can disable Microsoft Defender Antivirus so only one real-time provider is active. The practical remedy is to use the product’s documented handoff process and leave one real-time antivirus provider enabled.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Will restarting Windows permanently fix 0x80070422?
A restart applies a service change and can clear a temporary state, but it does not re-enable a service whose startup type is Disabled or overcome a blocked proxy rule. If the code returns, inspect the service and network conditions rather than repeating restarts.
What if the manual Defender command says the update cannot be downloaded?
That result points toward connectivity, proxy, firewall, or antivirus-ownership conditions when the Defender services themselves are running. Verify the required Microsoft update URLs and the active antivirus provider, then rerun the command from the current platform directory.
Does 0x80070422 mean my PC is infected?
No. The documented meaning is a disabled service, and Defender guidance also lists network and antivirus-precedence checks. The code alone is not evidence of malware.
Frequently Asked Questions
Can error 0x80070422 damage my files?
The code identifies a disabled or unavailable service condition; it does not by itself indicate that personal files are damaged. Avoid deleting system folders or changing unrelated registry settings while troubleshooting, because those actions are not part of Microsoft’s documented service and update checks.
Free tools Windows power users keep installed
One-click scans. No signup required.
Why did a third-party antivirus make Defender stop updating?
When a non-Microsoft antivirus registers through the Windows Security Center API, Windows can disable Microsoft Defender Antivirus so only one real-time provider is active. The practical remedy is to use the product’s documented handoff process and leave one real-time antivirus provider enabled.
Will restarting Windows permanently fix 0x80070422?
A restart applies a service change and can clear a temporary state, but it does not re-enable a service whose startup type is Disabled or overcome a blocked proxy rule. If the code returns, inspect the service and network conditions rather than repeating restarts.
What if the manual Defender command says the update cannot be downloaded?
That result points toward connectivity, proxy, firewall, or antivirus-ownership conditions when the Defender services themselves are running. Verify the required Microsoft update URLs and the active antivirus provider, then rerun the command from the current platform directory.
Does 0x80070422 mean my PC is infected?
No. The documented meaning is a disabled service, and Defender guidance also lists network and antivirus-precedence checks. The code alone is not evidence of malware.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
