I have two updates in Microsoft Update (the upgraded version of Windows Update) that constantly fail to install on one of my Windows Server 2003 servers. The error code is 0x80070005. I have tried installing them many times, also after a reboot of the server.

I found a tip to delete the folder C:\Windows\SoftwareDistribution\ at the bottom of Error downloading updates in Windows Update. That worked for another update with the same problem, but I am still stuck with two updates that won't install.

The updates that remain are KB968816 and KB961371. The update where SoftwareDistribution folder trick worked was KB967723.

Any other tricks I could try?

  • Link down...................
    – Pacerier
    Apr 21, 2015 at 23:33

3 Answers 3


You can download the updates and install them manually.




I had this problem on my Windows Server 2003 R2 SP2 too, after contacting Microsoft they emailed me the following instructions. I followed until suggestion 3 and after restarting my Windows Update is working again!

Note: I didn't try Suggestion 4, I did Suggestion 3 and it works for me.

Warning: Doing Suggestion 3 will reset all security settings with the following side effects (pretty easy to solve though)

  • My ASP website stopped working (had to go to ASP folders and enable access to NETWORK SERVICE).
  • MS SQL Server also fails to start. I had to repair my SQL Server installation using the SQL Server installer to make it work again.

You have been warned, so here goes...

Suggestion 1: Login as Administrator (doh!)

Suggestion 2: Temporarily disabled Antivirus (doh!)

Suggestion 3: Automatically restore security settings to the default


  1. Access the link http://support.microsoft.com/?kbid=313222

  2. Follow the Windows XP steps.

Restart your computer and try to do Windows Update again to see if the issue has been resolved.

Suggestion 4: Reset permissions


This step will reset the permission settings on this system, which may take some time. Your patience is highly appreciated.

Step 1: Download SubInACL (SubInACL.exe)

  1. Please download the "subinacl.msi" from the following link and save the installation patch on the Desktop:


  1. Please go to the Desktop and double click the downloaded file to install it.

  2. Please select "C:\Windows\System32" as the destination folder during the installation (Note: We assume C:\ is the system partition). Later we will use this tool to reset the current permission settings on the machine.

Step 2:

  1. Click "Start", "Run", type: "notepad C:\reset.cmd" (without quotations) and press "Enter". Choose "Yes" when you are prompted.

  2. Copy the following commands and then paste them into the opened Notepad window:

@echo off

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose secedit.exe /analyze /db C:\WINDOWS\sectest.db /cfg C:\WINDOWS\inf\defltwk.inf /log C:\WINDOWS\security\logs\secanalyze.log secedit.exe /configure /db C:\WINDOWS\sectest.db /cfg C:\WINDOWS\inf\defltwk.inf /log C:\WINDOWS\security\logs\secrepair.log

cipher /A /D c:\windows\system32\catroot*.* cipher /A /D C:\WINDOWS\system32\CatRoot{F750E6C3-38EE-11D1-85E5-00C04FC295EE}*.*


subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f

subinacl /subdirectories %SystemDrive% /grant=administrators=f

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f

subinacl /subdirectories %SystemDrive% /grant=system=f

@Echo =========================

@Echo Finished.

@Echo =========================


  1. After pasting the above commands, please close the "Notepad" window. Choose "Yes" when prompted to save the file.

  2. Click "Start", "Run", type: "C:\reset.cmd" (without quotations) and press "Enter" to run the commands pasted.

  3. You will see a DOS-like window processing the request.

(NOTE: This step may take several minutes, please be patient. When it is finished, you will be prompted with "Finished, press any key to continue".)

After completing the above steps, restart and refer to the Windows Update website to install the update again.


I just encountered this problem (Windows updates fail to install or even download on Server 2003 R2) but for different KB numbers.

The solution was to stop the Indexing Service via services.msc, then retry the updates.

This issue (at least when I saw it) is due to the Indexing Service locking the update.url files. I found that solution at https://social.technet.microsoft.com/Forums/windowsserver/en-US/0283f990-9935-4f3b-906e-31a37385953c/windows-update-0x80070005-errors.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .