Recommended Free Tools
If Windows Security shows 0x80070422 (sometimes mistyped as “8×80070422”), Windows is reporting that a required service is disabled and cannot start. Identify which component displayed the message, set that service to its supported startup mode in Services, start it, restart Windows, and test again. Do not change unrelated services or apply random registry files.
What error 0x80070422 means
Microsoft defines 0x80070422 as: “The service cannot be started because it is disabled.” The code is not exclusive to Defender. It can be raised by Windows Security, Defender security-intelligence updates, Windows Update, Windows Firewall, or another Windows component. The service you need to repair therefore depends on the exact screen and message that produced the code.
As an Amazon Associate I earn from qualifying purchases.
The title’s 8x80070422 is not the standard Windows format. Before changing anything, confirm whether the on-screen value is 0x80070422, and record the complete message. A similar-looking code from a different component may require a different service.
Identify the affected component first
Write down these details before attempting a repair:
#1 Best Overall
![Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
- The exact hexadecimal code and full wording.
- Whether it appeared in the Windows Security app, during a Defender update, in Windows Update, or while checking Firewall.
- Your Windows edition and build number. Press Win+R, enter
winver, and press Enter to view this information. - Whether another antivirus product is installed and shown as the active provider.
- Whether the computer is owned or managed by an employer, school, or other organization.
This record prevents you from changing the wrong service and gives an administrator or Microsoft support enough information to continue if the normal repair does not work.
Protect your current configuration
Changing service configuration is normally reversible, but create a restore point or make sure you have a recent backup before proceeding. A managed computer may enforce service settings again after you change them; in that case, repeated local edits can obscure the underlying policy. Keep your administrator password available because the Services console and Defender diagnostics require elevated rights.
Repair the disabled service in Services
Use this procedure when the message names a service or clearly identifies the Windows component involved.
- Open the Services console. Press Win+R, type
services.msc, and press Enter. Approve the User Account Control prompt if it appears. - Locate the service named in the error. Services are listed alphabetically. If the message came from Firewall, Windows Update, or another component, select that component’s service rather than assuming it is Defender.
- Open its properties. Double-click the service, or right-click it and choose Properties.
- Choose the supported startup type. In Startup type, select the automatic setting documented for that service. Do not set every security-related service to Automatic simply because one service was disabled; some services use different supported modes.
- Start the service if it is stopped. Click Start while the Properties dialog is open. If Start is unavailable, note the message Windows displays instead of repeatedly clicking it.
- Save the change. Click Apply, then OK. Close the Services console.
- Restart Windows. A restart lets dependent security components reload with the new service state.
- Test the original action. Open Windows Security or repeat the Defender, Windows Update, or Firewall operation that produced the error. Record any new code rather than assuming the first error remains.
If the service starts and stays running after the restart, the disabled-service condition has been addressed. If it immediately returns to Disabled, disappears from the list, or fails with an access or dependency error, continue with the diagnostics below instead of forcing the setting.
Rank #2
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download] | Includes Scam Protection, Advanced VPN, Dark Web Monitoring, & PC Cloud Backup](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Inspect Defender services with administrator PowerShell
When the failure is specifically in Defender or Windows Security, inspect the related services as a group. Open PowerShell as administrator from the Start menu, paste the following command, and press Enter:
Get-Service WinDefend, WdBoot, WdFilter, WdNisSvc, WdNisDrv, SecurityHealthService, wscsvc | Format-Table -Auto DisplayName, Name, StartType, StatusThe command reports each service’s display name, internal name, startup type, and current status. Compare those values with Microsoft’s Defender troubleshooting table for your Windows version. The important point is to distinguish an expected state from an unexpected one rather than changing every entry.
| Service name | How to interpret the result |
|---|---|
WinDefend |
An unexpected stopped or disabled state can prevent Microsoft Defender from operating. |
WdFilter |
An unexpected stopped state needs investigation because it is part of Defender’s protection stack. |
WdNisSvc |
An unexpected stopped state can indicate a problem with Defender’s network-inspection component. |
WdNisDrv |
Review its reported state together with WdNisSvc; do not alter it in isolation. |
SecurityHealthService |
An unexpected stopped state can affect the Windows Security interface and its health reporting. |
wscsvc |
This Windows Security Center service reports security-provider status; an unexpected stopped state can make provider information inaccurate. |
WdBoot |
Microsoft notes that being stopped after boot can be normal. Treat it differently from an unexpected stopped state in the other services. |
Do not copy a startup value from one service to another. If the table shows a service missing, a startup type that keeps reverting, or a status that does not match Microsoft’s documented state, stop making local changes and use the escalation path later in this guide.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Check whether another antivirus provider disabled Defender
A non-Microsoft antivirus product that uses the Windows Security Center API can register itself as the active provider. In that situation, Windows may disable Defender and stop its security-intelligence updates by design.
Rank #3
![Norton 360 Standard 2027 Antivirus, 1 Device, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41x4znw3OyL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 1 PC, Mac, iOS or Android device in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
- Open the Windows Security app.
- Open Settings.
- Select Manage providers.
- Check which antivirus provider is listed as active.
- If a third-party product is active, use that vendor’s supported procedure to disable or uninstall it. Do not terminate its files or delete its folders manually.
- Restart Windows and check Windows Security again.
Do not run two products that both attempt to control the same protection role unless their vendors explicitly support that arrangement. If the other product is required by an employer or school, ask the administrator to confirm the intended provider instead of removing it yourself.
Run Microsoft’s Windows Security troubleshooter
If the service startup type and status look correct but Windows Security still reports a problem, use Microsoft’s Windows Security troubleshooter. The troubleshooter checks and can enable Windows Firewall, antivirus-protection status, and related security options. Follow the Microsoft instructions for obtaining and running the troubleshooter for your Windows edition, then restart if it requests one.
The troubleshooter is most appropriate after you have identified the component and checked for a competing antivirus provider. It is not a substitute for identifying a service that is being disabled by policy or for repairing a managed device.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Choose the next step based on your situation
| Situation | Best next action | What to verify afterward |
|---|---|---|
| The message names a service and the device is not policy-managed | Use services.msc to apply that service’s supported automatic setting, start it, restart Windows, and retest. |
The service remains in the intended startup mode after restart and the original action works. |
| The affected service is unclear | Record the exact screen and message, then inspect the relevant component instead of changing several services at once. | The new test is performed in the same Windows component that produced the code. |
| Another antivirus provider is active | Use Windows Security > Settings > Manage providers, then follow that product’s supported disable or uninstall procedure. | After restart, Windows Security shows the intended provider and updates operate normally. |
| Defender services show unexpected states | Run the administrator PowerShell command and compare the output with Microsoft’s troubleshooting table. | Only documented, expected service states remain; do not treat WdBoot’s post-boot stopped state as automatically abnormal. |
| Service settings are correct but Windows Security still fails | Run Microsoft’s Windows Security troubleshooter. | Firewall and protection status are enabled and the original message is gone. |
| The device is managed, or services are missing or revert to Disabled | Contact the device administrator or Microsoft support. | The administrator confirms the policy or repairs the installation through an approved process. |
| The computer runs Windows 10 | Include an operating-system upgrade plan in the decision. | Windows 10 support ended on October 14, 2025; continued use should be treated as an unsupported-state risk. |
When services are missing, locked, or keep reverting
A service that cannot be started, is absent from services.msc, or immediately returns to Disabled points to a deeper cause than a one-time setting. Possible explanations include an organization’s policy, damaged Windows components, malware interference, or a managed-device configuration. The reviewed Microsoft guidance does not establish a universal registry edit for 0x80070422.
Rank #4
![Norton 360 Premium 2027 Antivirus, 10 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41JNWru8mYL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 10 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
- Managed policy: Ask the organization’s administrator whether Defender, Firewall, or Windows Update is intentionally controlled. Local changes may be overwritten.
- Possible corruption: Give Microsoft support the exact service output, Windows build, and error wording so they can select a supported repair path.
- Possible malware interference: Avoid disabling additional security controls while investigating. Use the security and support procedures available for your Windows edition.
- Unknown dependency or access error: Record the complete dialog text. A dependency failure is not fixed by changing an unrelated service’s startup type.
Do not download registry files that promise a guaranteed fix, and do not disable security services merely to make the warning disappear. Those actions can remove protection while leaving the underlying configuration problem unresolved.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Common mistakes that prolong the error
Changing every service to Automatic
Services have different supported startup modes. Changing unrelated entries can create new failures and makes it harder to identify the original cause. Change only the service tied to the message, using Microsoft’s documented setting.
Skipping the restart
Some security components initialize during boot. Always restart after saving a service change, then repeat the same operation that generated the code.
Ignoring the active provider
Defender can remain disabled because another antivirus product is registered with Windows Security Center. Check Manage providers before repeatedly starting Defender services.
Best Value
![Norton AntiVirus Plus 2027, 1 Device, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41VAV7G019L._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for your PC or Mac in minutes!
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- SAFEGUARD YOUR PASSWORDS Easily create, store, and manage your passwords, credit card information and other credentials online in your own encrypted, cloud-based vault.
- 2 GB SECURE PC CLOUD BACKUP Help prevent the loss of photos and files due to ransomware or hard drive failures.
Assuming every stopped service is broken
WdBoot being stopped after boot can be normal. Judge statuses against Microsoft’s table for your Windows version rather than against a generic “all services must run” rule.
Using unsupported cleanup or registry tools
There is no established one-size-fits-all registry edit for this code. Random downloads can change permissions or security settings in ways that are difficult to reverse.
Windows 10 support and upgrade planning
Microsoft’s current Windows Security support information states that Windows 10 support ended on October 14, 2025. A Windows 10 computer can still display and sometimes resolve this error, but it no longer receives the normal supported-lifecycle treatment. If the device meets the requirements for a supported Windows release, plan an upgrade; if it is managed, coordinate that decision with the administrator. The end-of-support date does not identify which service is disabled, so perform the component and service checks first.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsWhat a successful repair looks like
- The code is confirmed as
0x80070422, not a mistyped or different value. - The originating component is known.
- The named service has its supported startup type and starts without an error.
- The service remains correctly configured after a restart.
- Windows Security shows the intended antivirus provider, Firewall status, and protection state.
- The original Defender or security-intelligence update operation completes without the disabled-service message.
If any of these checks fails, preserve the PowerShell output and dialog text and escalate rather than making progressively broader changes.
Quick Recap
As an optional shortcut after the manual checks, Outbyte PC Repair can address more than 100 common Windows issues where possible, including broken system elements and shared DLL problems, while also offering settings adjustments, temporary-file cleanup, privacy warnings, vulnerability checks, a real-time boost, file shredding, and an app-crash log. It runs on Windows 11, 10, 8, and 7; its free trial is offered by category for at least two days before a subscription, and it complements—not replaces—antivirus protection. Results vary, and no tool repairs every crash.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
