Fix Windows Error 0x80070422: Service Disabled or Access Denied

Windows error 0x80070422 usually appears when you try to update the system, activate Windows, or use the Microsoft Store. It means a required Windows service is either disabled or your account lacks permission to start it. This guide walks you through re-enabling the affected services and fixing permission issues, step by step.

What You’ll Need

• An administrator account (you’ll need to confirm UAC prompts)
• Access to the Windows Services console (services.msc)
• A working internet connection (for some steps)

Step-by-Step

1. Open Services with admin rights. Press Win + R, type services.msc, then press Ctrl + Shift + Enter to run as administrator. Click Yes on the UAC prompt.
2. Locate the Windows Update service. Scroll down to Windows Update (display name may be “Windows Update”). Double-click it to open properties.
3. Set the startup type to Automatic. In the General tab, change Startup type to Automatic (not “Automatic (Delayed Start)”). Click Apply.
4. Start the service. If the service is stopped, click Start. If it’s already running, skip this step. Click OK to close.
5. Check the Background Intelligent Transfer Service (BITS). Find Background Intelligent Transfer Service in the list. Double-click it, set startup type to Automatic, apply, and start if stopped. Click OK.
6. Verify Cryptographic Services. Locate Cryptographic Services (or “CryptSvc”). Set startup type to Automatic, apply, and start if needed. Click OK.
7. Check the Windows Modules Installer service. Find Windows Modules Installer. Set startup type to Manual (this is normal). If the service is stopped, try starting it; if it fails, continue to the next steps.
8. Run the Windows Update troubleshooter. Go to Settings > System > Troubleshoot > Other troubleshooters. Select Windows Update and click Run. Follow the prompts.
9. Check service permissions. If you still see “Access Denied,” right-click the Windows Update service in Services, select Properties, go to the Log On tab. Ensure “Local System Account” is selected and the “Allow service to interact with desktop” checkbox is unchecked. Click Apply.
10. Reset the service security descriptors. Open Command Prompt as administrator (search “cmd”, right-click, “Run as administrator”). Type the following and press Enter after each:

    sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

    sc sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

    This resets the permissions to default for those services.

11. Restart your PC. After making changes, restart Windows and try updating again.

Common Mistakes

• Setting Windows Update to Manual. Some guides suggest setting it to Manual, but Windows Update needs to be Automatic to run properly.
• Not running as administrator. If you open Services without admin rights, you won’t be able to change startup types or start services.
• Skipping the BITS service. BITS is essential for downloading updates; if it’s disabled, Windows Update fails.
• Forgetting to restart. Some changes only take effect after a reboot.

Tips

• Use the Services window’s Export List feature to save a backup of your service configurations before making changes.
• If you’re on a corporate network, group policy may disable these services. Check with your IT admin before making changes.
• Keep your Windows installation up to date with the latest cumulative updates once the error is fixed.

Troubleshooting

If the error persists after following the steps:

• Check for third-party security software. Some antivirus or firewall programs can block Windows Update services. Temporarily disable them (if safe) and try again.
• Run System File Checker. Open Command Prompt as admin and run sfc /scannow. This repairs corrupted system files.
• Use DISM. In the same Command Prompt, run DISM /Online /Cleanup-Image /RestoreHealth to fix Windows image issues.
• Check the registry. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv in Registry Editor (regedit). Ensure the Start value is set to 2 (Automatic). If it’s 4, change it to 2 and restart.
• Create a new user account. If the issue is permission-related, create a new administrator account and try updating from there.
• Reset Windows Update components manually. Stop the BITS and Windows Update services, rename the C:\Windows\SoftwareDistribution folder to SoftwareDistribution.old, then restart the services. This clears the update cache.

Frequently Asked Questions

Why does error 0x80070422 happen?

It occurs when the Windows Update service (wuauserv) or related services like BITS are disabled, or when the current user lacks permission to start them. This can happen after malware cleanup, manual service changes, or group policy restrictions.

Can I fix this without admin rights?

No. Changing service startup types and starting services requires administrator privileges. You’ll need an account that is a member of the Administrators group.

Will resetting service permissions harm my system?

No. The sc sdset commands restore the default security descriptors that Windows uses by default. It only affects the specified services (Windows Update and BITS) and is a standard repair step.

What if the Windows Modules Installer service won’t start?

That’s normal. The Windows Modules Installer service is set to Manual and only starts when needed. If it fails to start during an update, try running the Windows Update troubleshooter or restarting the computer.

Is it safe to use third-party “Windows Update fix” tools?

It’s safer to use built-in tools like the Windows Update troubleshooter or the steps in this guide. Third-party tools may make unauthorized changes and can cause more issues.

How long does the fix take?

Most of the steps take only a few minutes. The longest part is running the System File Checker or DISM, which can take 15-30 minutes depending on your system.

Related

• Fix Can’t Map a Drive in Windows 10 v2004
• Detect and Remove a Discord RAT from Windows
• Reinstall Linux Mint Without Losing Data & Settings