Error with Windows Update KC5126657

A N 20 Reputation points
2026-10-21T22:13:02.6933333+00:00

I have been trying to install Windows 10 Update KB5126657, however, I get error 0x80070005 whenever I try to install. From the Windows Update log:

2026/10/21 12:14:47.6953703 19848 23044 UDP Deployment job Id A028E7A7-35EE-4B55-89E2-7CA32B35E987 : Method failed for update D125362D-3C64-4321-BD85-5BBA34BB6DBF.200, hrDeploy = 0x8024200b, error code = 0x80070005, error description = (null)

Things I have tried:

  • Temporarily uninstalling Anti-virus
  • Running icacls C:\Windows\WinSxS /reset /t /c /q in Administrator Command Prompt (Access Denied)
  • Restarting BITS and Windows Update Services
  • Running ren C:\Windows\System32\catroot2 catroot2.old in Administrator Command Prompt (Access Denied)
  • Running sfc /scannow and DISM /Online /Cleanup-Image /RestoreHealth in Administrator Command Prompt (No issues found How do I fix this?
Windows for home
Windows for home

A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.

0 comments No comments

Answer accepted by question author
Ramesh 183.5K Reputation points Volunteer Moderator
2026-10-22T04:10:29.1933333+00:00

Resetting WinSxS permissions is not a good idea.

Please try the offline installer (MSU) package.

https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2026/10/windows10.0-kb5126657-x64_6ea46ad975176d6c6e9dcc79859d67c5193d6fc0.msu


If the update still fails, upload your CBS logs to OneDrive or GoFile.io and post the link here.

The logs are available in the following folder. Copy the following folder to the desktop.

c:\windows\logs\cbs

Zip the folder and share the file on OneDrive or GoFile.io. Post the link here.


Was this answer helpful?

2 people found this answer helpful.

1 additional answer

Sort by: Newest
  1. AI answer

    2026-10-22T16:37:12.4633333+00:00

    Back up important files, restore WinSxS ownership to TrustedInstaller, reset its permissions, and then reset the Windows Update folders while all three relevant services are stopped.

    1. Repair ownership and permissions

    The 0x80070005 result is E_ACCESSDENIED; Microsoft associates it with Windows Update being unable to access required files, folders, or registry entries. The accompanying 0x8024200B only indicates that the update installer failed—it does not identify a more specific cause.^1^^2^

    Because resetting WinSxS permissions already returned Access Denied, first restore its documented owner:

    1. Back up important personal files.
    2. Search for Command Prompt, right-click it, and select Run as administrator.
    3. Run these commands individually:
    icacls "%windir%\WinSxS" /setowner "NT SERVICE\TrustedInstaller" /t /c /q
    icacls "%windir%\WinSxS" /reset /t /c /q
    icacls "%windir%\SoftwareDistribution" /reset /t /c /q
    

    Some individual access-denied messages can be reported while /c continues processing. If the commands complete, restart Windows and try the update once. These are Microsoft’s documented ownership and permission repairs for this error.^1^

    2. Reset all Windows Update components

    If the update still fails, use the complete reset sequence below. You previously stopped BITS and Windows Update, but stopping Cryptographic Services as well may release the catroot2 folder. An access-denied result can also come from permissions or file-system filter drivers, so this is not proof that Cryptographic Services caused the earlier failure.

    Run in an administrative Command Prompt:

    net stop wuauserv
    net stop bits
    net stop cryptSvc
    
    ren "%windir%\SoftwareDistribution" SoftwareDistribution.old
    ren "%windir%\System32\catroot2" catroot2.old
    
    net start cryptSvc
    net start bits
    net start wuauserv
    

    Restart the PC, then open Settings → Update & Security → Windows Update → Check for updates. Windows will recreate both folders. This sequence is Microsoft’s documented Windows Update component reset.^1^

    Do not manually take ownership of or delete the entire WinSxS folder.

    3. Check non-Microsoft file-system filters

    Uninstalling antivirus covers only part of the third-party interference check. Security, backup, encryption, and storage products can leave file-system filter drivers installed.

    1. In an administrative Command Prompt, run:
    fltmc
    
    1. Identify any non-Microsoft filters. If one belongs to software that can safely be stopped, unload it temporarily:
    fltmc unload <DriverName>
    
    1. Repeat for other non-Microsoft filters, restart, and retry the update.

    Caution: unloading a filter can temporarily disable protection, backup, encryption, or storage functionality. Do not unload an unknown filter; instead, update or temporarily uninstall its associated application. Microsoft includes this check in its 0x80070005 procedure.^1^

    Applicability and escalation

    KB5126657 applies to Windows 10 22H2 under Windows 10 ESU, and to Windows 10 Enterprise LTSC 2021 and IoT Enterprise LTSC 2021 for version 21H2. Its published known issue concerns USB Audio Class 1.0 devices, not installation error 0x80070005.^3^

    Run winver and verify that the installed Windows edition/version is eligible for this update. If it is not enrolled in or licensed for the applicable servicing channel, permission repairs will not establish update eligibility.

    If the ownership command still returns Access Denied, or installation still fails after the reset and filter-driver check, generate a fresh log:

    Get-WindowsUpdateLog
    

    Also retain C:\Windows\Logs\CBS\CBS.log, then contact Microsoft Support. The official procedure recommends escalation after the permission, component-reset, system-repair, and third-party-filter checks fail.^1^


    References

    1. Troubleshoot Windows Update error 0x80070005
    2. Windows Update error codes by component
    3. October 13, 2026—KB5126657 (OS Builds 19045.7807 and 19044.7807 ...
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.