Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
FREEDOM251

Freedom251 › Blog › Error Codes

How to Fix “0x800070422 Windows Defender Denied” and Spot the Scam

By Freedom251 Team · · 7 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

First, check the digits. Microsoft documents 0x80070422, not 0x800070422. The documented code means the Windows Update service is disabled or stopped; it is not, by itself, a Windows Defender malware detection. The seven-digit version has been reported in browser scareware pages that falsely claim a virus and demand a phone call. Do not call the number or install anything from that page. Close it, verify the code in Windows, and then repair Windows Update using the steps below.

Check which code you actually have

A single extra zero changes the interpretation. Compare the message with this table before changing services or downloading repair software.

As an Amazon Associate I earn from qualifying purchases.

Displayed value What is established What to do
0x80070422 Microsoft identifies this as ERROR_SERVICE_DISABLED. Windows Update has stopped working or is not running. Enable and start Windows Update, restart the PC, and check for updates again.
0x800070422 This seven-digit form is not the documented Microsoft error reference. It has appeared in browser pages claiming the computer is infected and demanding a call. Treat the page as a likely support scam. Close the tab, do not call, and verify Windows status from Settings and Windows Security.
Another code The digits may have been copied incorrectly or may refer to a different Windows problem. Copy the complete message from the actual Windows dialog or Settings page before troubleshooting.

Microsoft Learn describes the documented condition plainly: “This issue occurs when the Windows Update service stops working or isn’t running.” That points to a service-configuration problem, not proof that Defender detected malware.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why a page may say “Windows Defender denied”

The legitimate Windows condition

Windows Update depends on a Windows service. If that service is disabled, stopped, or unable to run, Windows can show update failures containing 0x80070422. The wording may make the problem sound like a security denial, but the code itself refers to the update service.

#1 Best Overall
Sale
Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download] | Includes Scam Protection, Advanced VPN, Dark Web Monitoring, & PC Cloud Backup
  • ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
  • TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
  • ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
  • REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
  • DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.

The browser-scam condition

A web page can imitate a Windows alert while the browser is open. A loud warning, a countdown, a claim that Defender found a virus, or instructions to call a phone number are social-engineering signals. A web page cannot establish that Microsoft Defender performed a scan. The seven-digit string has been documented in this type of support-scam presentation.

A managed-computer condition

On a work, school, or otherwise managed PC, an administrator may enforce the Windows Update service state. If the Startup type control is unavailable, or your change reverts after a restart, the device may be governed by organizational policy. Do not try to bypass that policy with registry edits or scripts; contact the administrator.

What to do if the warning appeared in a browser

  1. Do not call the number. Microsoft does not require a phone call because a random web page displayed an error code.
  2. Do not provide remote access, passwords, payment details, or verification codes. Close the page without following its instructions.
  3. Close the browser tab. If it will not close normally, close the browser window from the taskbar or use Task Manager to end the browser process.
  4. Open Windows Security yourself. Use the Start menu, then run the available security check from the installed Windows security product. Do not use a scan button supplied by the suspicious page.
  5. Verify Windows Update from Settings. Open Start > Settings > Windows Update and read the status shown there. A genuine update problem will also be visible in Windows, not only in a web tab.
  6. If you entered information or installed remote-control software, disconnect from the internet while you assess the machine, remove the untrusted program, change affected passwords from a different trusted device, and notify the relevant payment provider or organization.

These steps address the scam presentation. If Settings shows the documented 0x80070422 problem, continue with the service repair below.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]
  • ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
  • TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
  • ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
  • REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
  • DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.

Manual fix for the documented 0x80070422 error

1. Open the Windows Services console

  1. Press Win + R to open Run.
  2. Type services.msc and press Enter.
  3. In the list, locate Windows Update. The list is alphabetical, so you can click a heading or type the first letters to reach it.

Use an administrator account if Windows asks for permission. Do not alter unrelated services simply because they have similar names.

2. Set Windows Update to start automatically

  1. Double-click Windows Update to open its Properties dialog.
  2. In Startup type, select Automatic.
  3. Read Service status. If it says Stopped, select Start.
  4. Select Apply, then OK.

If the service is already running and set to Automatic, leave those settings in place and continue to the restart and troubleshooter steps. If Windows refuses the change, reports an access error, or the setting returns to Disabled, treat that as an administrative or policy issue rather than repeatedly forcing it.

3. Restart and test Windows Update

  1. Restart the computer from Start > Power > Restart.
  2. After signing in, open Start > Settings > Windows Update.
  3. Select Check for updates if that button is shown.

Microsoft’s supported sequence specifically calls for restarting the PC and checking for updates again. If the update check now works, no Defender registry change is needed.

Rank #3
Sale
Norton 360 Premium 2027 Antivirus, 10 Devices, Auto-Renews [Download]
  • ONGOING PROTECTION Download instantly & install protection for 10 PCs, Macs, iOS or Android devices in minutes!
  • TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
  • ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
  • REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
  • DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.

4. Run the built-in Windows Update troubleshooter

  1. Open Start > Settings > System > Troubleshoot > Other troubleshooters.
  2. Find Windows Update and select Run.
  3. Follow the on-screen recommendations, allow the troubleshooter to apply a fix when offered, and restart if Windows requests it.
  4. Return to Settings > Windows Update and check again.

The troubleshooter is appropriate when the service is enabled but update detection or installation still fails. It does not validate a number shown only by a browser page.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

5. Rebuild a stuck Windows Update download cache

Use this step when Windows Update remains stuck after the service repair and troubleshooter. Deleting the contents of the cache removes downloaded update files; it does not remove your personal documents.

  1. Open services.msc again.
  2. Open Windows Update Properties and select Stop. Confirm that the status changes to Stopped before continuing.
  3. Open File Explorer and enter C:WindowsSoftwareDistribution in the address bar.
  4. Delete the contents of that folder. Do not delete or rename unrelated folders elsewhere in C:Windows.
  5. Return to the Windows Update Properties dialog and select Start. Select Apply, then OK.
  6. Restart the PC and check for updates from Settings.

If a file cannot be deleted, another update component may still be using it. Stop Windows Update again, close File Explorer windows showing that folder, and retry. If the service cannot be stopped or started because of policy, stop here and ask the device administrator.

Rank #4
Sale
Norton 360 Platinum 2027 Antivirus, 20 Devices, 3 Months Free [Download]
  • ONGOING PROTECTION Download instantly & install protection for 20 PCs, Macs, iOS or Android devices in minutes!
  • TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
  • ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
  • REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
  • DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.

How to tell whether the repair worked

  • The Windows Update service shows Running in Services.
  • Its Startup type remains Automatic after a restart.
  • Settings > Windows Update opens normally and can check for updates without the documented service error.
  • The same code no longer returns after the cache is rebuilt and the PC is restarted.

A browser tab disappearing is not proof that Windows Update was repaired; it only means the web page is no longer visible. Conversely, a successful update check does not prove that a previous scare page was a genuine Defender alert. Treat those as separate questions.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

When the service fix does not hold

The Startup type is locked

A disabled control, an access-denied message, or a setting that immediately reverts commonly indicates administrator control. On an organization-managed computer, provide the administrator with the exact code from Settings and the time it appeared. Do not download “activation” scripts or registry files advertised as instant fixes.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The service starts but updates still fail

Run the Windows Update troubleshooter, restart, and then rebuild the SoftwareDistribution contents as described above. Record the exact message shown in Settings rather than relying on a shortened pop-up title. A different code may require a different procedure.

Best Value
Norton 360 Deluxe 2027 Antivirus, 5 Devices, 3 Months Free [Download]
  • ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
  • TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
  • ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
  • REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
  • DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.

The warning keeps returning only while browsing

That pattern points back to the browser page, notification abuse, or an unwanted browser change rather than Windows Update. Close the page, avoid its phone number, and run the security checks from Windows Security or your installed antivirus application. Verify update status in Settings every time.

You are unsure whether the code was typed correctly

Copy it character by character, including every zero, and note where it appeared: Windows Settings, a desktop dialog, or a browser tab. The distinction between 0x80070422 and 0x800070422 determines whether you are troubleshooting a Windows service or responding to a likely scam display.

Remedy choices and their trade-offs

Remedy Source authority Scope Reversibility Administrative control
Enable and start Windows Update in Services Microsoft-supported repair for 0x80070422 Corrects the service state Easy to reverse by changing the service setting May be blocked on managed PCs
Restart and check for updates Microsoft-supported next step Confirms whether the service change took effect Fully reversible Usually available to the device user
Windows Update troubleshooter Built into Windows Diagnoses common update configuration problems Changes are limited to fixes it presents Some actions may require administrator approval
Clear SoftwareDistribution contents Microsoft-documented cache repair Removes potentially stuck update downloads Windows recreates needed cache data; downloaded updates must be obtained again Requires permission to stop the service and modify the folder
Browser pop-up phone support Not a Microsoft repair channel Does not repair Windows Update High risk of fraud or unwanted remote access Never grant access based on the pop-up

Common mistakes to avoid

  • Do not treat the seven-digit string as a confirmed Defender detection. Its documented appearance is in a browser-scam context, while Microsoft’s service error is 0x80070422.
  • Do not change unrelated Defender registry values. The documented fix concerns Windows Update’s service state.
  • Do not delete the entire Windows folder or the SoftwareDistribution folder itself. The supported cache step is to stop Windows Update and delete the folder’s contents.
  • Do not keep retrying a blocked service change on a managed PC. Policy enforcement requires the administrator’s help.
  • Do not use a random “activation” script. A script supplied by an alarming web page can make the original problem harder to diagnose.
  • Do not confuse a successful browser close with a successful update repair. Confirm the result in Settings.

After you complete Microsoft’s manual steps, Outbyte PC Repair is an optional shortcut that can scan for and repair some Windows system abnormalities, including issues that may contribute to errors. It complements an antivirus rather than replacing one; results vary, and no utility repairs every crash or update problem. It supports Windows 11, 10, 8 and 7, offers a free trial by category for at least two days, and then requires a paid subscription.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Error Codessupport scamsWindows DefenderWindows troubleshootingWindows Update

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.