The message means 7-Zip can read the archive entry, but Windows refused to create, replace, or write the extracted file at the destination path shown in the error. The fastest safe test is to extract the same archive into a new folder under Documents or on the Desktop. If that works, the archive is readable and the original folder, an existing file, or security software is blocking the write.
Do not begin by repeatedly reinstalling 7-Zip or by turning off Windows security. Follow the destination, file-lock, security, elevation, and archive-health checks below in that order.
As an Amazon Associate I earn from qualifying purchases.
What “cannot open output file: Access is denied” means
During extraction, 7-Zip performs two separate jobs: it reads compressed data from the archive and writes each resulting file to a destination. This error normally occurs in the second job. The path printed after the message identifies the file Windows refused to create, replace, or modify.
A destination beneath Program Files, Windows, or another system-managed directory is protected from ordinary-user writes. A managed cloud folder, a directory owned by another Windows account, or a company policy can impose similar restrictions. The same wording can also appear when the target file is already open, marked read-only, or being examined by antivirus or endpoint-security software.
#1 Best Overall
These are different problems with different fixes. A clean extraction to a user-writable folder separates a destination problem from an archive problem before you change permissions or elevate 7-Zip.
First check the exact path and protect existing files
- Read the complete error line. Note the drive, folders, filename, and extension after “Cannot open output file.” The archive name alone is not enough to diagnose the failure.
- Decide whether the destination is protected. Treat
Program Files,Windows, the root of the system drive, another user’s profile, and managed or synchronized folders as potentially restricted. - Back up before replacing. A SourceForge report describes a failed replacement attempt in a protected directory that was accompanied by deletion of an existing same-named file. Copy important originals elsewhere before retrying an overwrite.
- Do not approve an unknown archive. Elevation gives an application more access; it does not make an untrusted archive safe.
The safest diagnostic: extract to a new user folder
Create a clean test destination
- Open File Explorer and create a new folder such as
Documents7zip-test, or create a new folder on the Desktop. - Open 7-Zip File Manager, select the archive, and choose Extract. Set the destination to that new folder rather than the location shown in the failed attempt.
- Run the extraction and note whether the same entry completes.
A new folder in your own profile normally gives your account write access without changing system permissions. It also avoids inherited restrictions from an application directory or a cloud-managed location.
Interpret the result
| Test result | Most likely meaning | Next action |
|---|---|---|
| Extraction succeeds in Documents or on the Desktop | The archive can be read; the original destination, ownership, policy, or an existing file is blocking the write. | Keep the extracted copy in the test folder, then use the target application’s installer or update process for a protected location. |
| It fails only when replacing one existing file | The file may be open, read-only, owned by another account, or intercepted by security software. | Close programs, inspect the file state, review security events, and preserve a backup before retrying. |
| It fails in every folder with one archive | Suspect a damaged download, incorrect archive headers, an unsupported method, or a problem at one archive entry. | Use 7-Zip’s Test command and obtain a fresh copy if the test reports errors. |
| It fails after Explorer drag-and-drop but works with Extract | The Explorer handoff used temporary files and introduced a separate write step. | Use 7-Zip’s Extract command for this archive and destination. |
Use Extract instead of Explorer drag-and-drop
The 7-Zip FAQ explains that Explorer drag-and-drop uses temporary files. That temporary-file handoff can fail even when a direct extraction works. In 7-Zip File Manager, select the archive, click Extract, choose the destination explicitly, and start the operation. This does not grant extra permissions; it simply removes the Explorer temporary-file path from the test.
If direct extraction succeeds, keep using it for the affected workflow. If both methods fail in the same user-writable folder, continue with the file-state and archive tests rather than assuming drag-and-drop is the only cause.
Fix a protected or incorrectly owned destination
Do not overwrite an application folder by hand when an installer exists
Files under Program Files and Windows are protected by design. If you are installing or updating an application, use that application’s installer or supported update procedure. It can place files with the expected ownership, permissions, services, and registry changes. Extracting replacement files directly into the folder can leave a partially updated program even when the write succeeds.
Copy to a writable location first
When you only need to inspect or edit the extracted files, extract to Documents, Desktop, or another folder your account controls. Work on that copy rather than weakening permissions on a system directory. If a program later needs the files in a protected path, follow its documented installation process.
Check ownership and permissions when the folder is not a system directory
Right-click the destination folder, choose Properties, and open the Security tab. Confirm that your account has permission to create and write files. On a work-managed computer, a policy may prevent you from changing these settings; contact the administrator instead of taking ownership blindly. Changing permissions broadly can expose other files and can be difficult to undo.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchHandle an existing file that is locked or read-only
Close every possible user of the file
- Close the application that opened the target file.
- Close editors, media players, terminals, archive windows, and File Explorer preview panes that may still hold a handle.
- Save work, exit the application completely, and retry the extraction.
- If the application runs a background service, stop it through its normal interface before replacing its files.
A locked file can produce the same access-denied wording as a folder permission failure. If extraction works under a new filename but not when replacing the old one, the lock or file state is more likely than a problem reading the archive.
Inspect the read-only attribute
Right-click the existing file, choose Properties, and inspect the Read-only box. Clear it only when you understand why it was set and have a backup. A read-only flag can be intentional for configuration, reference, or shared files; removing it may defeat that protection. If the box returns or cannot be changed, ownership or policy may be controlling the file.
Preserve the old copy before replacement
Rename or copy the existing file to a safe backup location before attempting an overwrite. This is especially important for configuration files, saved projects, and program components. A failed replacement should not become data loss.
Check antivirus and Windows security events
Security software may block extraction, quarantine an archive member, or prevent a replacement while it scans the file. One extraction-workflow FAQ identifies antivirus interference as a common cause and advises avoiding protected or cloud folders.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Open your antivirus or Windows Security interface and review Protection history, quarantine, and recent blocked-item events.
- Look for entries mentioning the archive, 7-Zip, the specific extracted filename, or the destination folder.
- If the file is trusted and the event is a false positive, use a narrowly scoped allow-list or restore action according to your security product’s procedure.
- Retry extraction, then remove the temporary exception when it is no longer needed.
Do not globally disable antivirus or Windows protection to force an extraction. An allow-list entry for one verified file or folder is less risky than turning off real-time protection for the whole computer. Security software can also lock a file briefly while scanning; waiting for the event to finish and retrying may resolve that case.
Use administrator elevation only when the destination truly requires it
If the files genuinely belong in a protected directory and the archive and destination are trusted, close 7-Zip, right-click 7-Zip File Manager, choose Run as administrator, and repeat Extract. Approve the User Account Control prompt only if the publisher and operation are expected.
Elevation is a narrow troubleshooting branch, not the default extraction method. It will not unlock a file held by another process, repair a damaged archive, or make an untrusted archive safe. If an elevated attempt still fails, return to the path, lock, security-event, and archive-health checks instead of repeatedly launching as administrator.
Test whether the archive itself is damaged
When archive corruption is likely
Suspect the archive when it cannot be opened or tested in any destination, when 7-Zip reports CRC or data errors, or when extraction always fails at the same entry regardless of permissions. A problem that follows one download everywhere is different from a problem that follows one protected folder.
Free tools Windows power users keep installed
One-click scans. No signup required.
Run 7-Zip’s Test command
- Open 7-Zip File Manager and select the archive.
- Choose Test.
- Read the final result and identify the first entry reporting a CRC, data, or header error.
The official 7-Zip FAQ says that, in its specific discussion of some ZIP archives that cannot be opened, 99% contain incorrect headers. That figure applies to the FAQ’s “cannot open some ZIP archives” condition; it is not a success rate for fixing an access-denied output-file error.
Best Value
Obtain a fresh download
If Test reports corruption, download the archive again from the original provider. Compare the new file size with the provider’s published size or checksum when one is available, and avoid resuming a demonstrably damaged download. If the second copy fails at the same entry, ask the provider for a replacement or for a different archive format.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Update or reinstall the correct 7-Zip build
The official support guidance says to verify that you are using the latest 7-Zip release before requesting support and to choose the correct 32-bit or 64-bit build. The current download page listed 7-Zip 26.03 for Windows, dated September 3, 2026, and recommended the executable installer at the time of the supplied information.
- Close all 7-Zip windows.
- Download the current Windows installer from the official 7-Zip site.
- Choose the architecture that matches your Windows installation; most modern 64-bit Windows systems use the 64-bit build.
- Run the installer, then retry extraction with a new user-writable test folder before returning to the original destination.
An update can correct an old-build or architecture mismatch, but it cannot override folder permissions, release a lock held by another process, or repair a corrupt archive. Keep those branches separate when evaluating the result.
Recommended Free Tools
Try another extractor only as a diagnostic
Another extraction application can reveal whether the failure is specific to 7-Zip, but it is not proof that either program is defective. A Fooocus discussion records one user getting past the exact output-file message with a different extractor; that is an individual anecdote, not a controlled comparison.
Use the alternative tool with the same archive and the same destination, then compare the result:
Quick Recap
- If it succeeds only in Documents or Desktop, Windows destination controls remain the likely cause.
- If it fails at the same archive entry everywhere, corruption or an unsupported method is more likely.
- If it succeeds in the protected folder, verify what files were written and whether the program is still correctly installed before relying on that workaround.
Decision guide by symptom
| Symptom | Priority checks | Preferred remedy |
|---|---|---|
| Works in Documents or Desktop | Folder permissions, ownership, system protection, cloud policy | Use the application installer or update process; keep the extracted copy in a user folder for inspection. |
| Fails only while replacing an existing file | Open handles, read-only status, antivirus events, backup state | Close the using program, clear read-only only when justified, review security history, and back up before overwrite. |
| Fails in every folder with one archive | 7-Zip Test output, CRC/data/header errors, download integrity | Redownload or request a replacement archive. |
| Fails after drag-and-drop but not Extract | Explorer temporary-file handoff | Use 7-Zip’s Extract command. |
| Fails with an old or mismatched build | Installed version and Windows architecture | Install the current architecture-matched release from the official source. |
| Fails even when elevated | File lock, security interception, archive health | Do not keep escalating; inspect the other branches. |
How to avoid the error next time
- Extract downloads to a folder you control before moving files into an application’s supported location.
- Use 7-Zip’s Extract command when drag-and-drop produces a temporary-file error.
- Keep backups of files you intend to replace, especially in protected directories.
- Close the program that owns a file before extracting a replacement.
- Review security notifications instead of disabling protection globally.
- Keep 7-Zip updated and match the installer architecture to Windows.
- Test a suspicious archive before spending time changing permissions.
As an optional shortcut after the manual checks, Outbyte PC Repair can look for more than 100 common Windows issues, including broken system elements and shared DLL problems, while also offering cleanup, settings adjustments, privacy warnings, vulnerability checks, a real-time boost, file shredding, and an app-crash log. It runs on Windows 11, 10, 8, and 7; a free trial is available by category for at least two days before a paid subscription. It complements antivirus software rather than replacing it, results vary, and no tool repairs every extraction failure.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
