When a Windows security patch will not install, start with the least disruptive sequence: record the exact error code and KB number, back up your files, restart the PC, verify internet access and free storage, run the Windows Update troubleshooter, restart again, and check for updates. Most failures can then be narrowed to a damaged update cache, disabled services, permissions, a conflicting driver, insufficient storage, or security software interference.
Do not begin by deleting system folders or uninstalling a security update. Work through the checks below in order, using an administrator account for service, cache, and system-file repairs. Microsoft’s guidance says, “Before trying any of the solutions below, make sure you back up your personal files.”
As an Amazon Associate I earn from qualifying purchases.
First, capture the failure safely
Open Windows Update and write down the complete error code and the update’s KB number before changing anything. The code is more useful than a message such as “Something went wrong,” and the KB number lets you confirm which patch is failing.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall- Back up personal files. Copy important documents, photos, and other data to a separate drive or trusted storage. A USB flash drive can provide temporary backup storage or hold recovery media; it is not itself a Windows Update repair tool.
- Check the network. Confirm that ordinary websites or other internet services load, and temporarily disconnect from a VPN or metered connection if your organization permits it.
- Check free space. Microsoft publishes a minimum of 16 GB free for a 32-bit Windows upgrade and 20 GB for a 64-bit upgrade. Those figures are upgrade guidance, not a guarantee that every security patch needs exactly that amount, but a nearly full system drive can prevent servicing operations.
- Restart Windows. A pending restart can block a second update attempt. Use Start > Power > Restart rather than shutting down and immediately powering on.
- Use an administrator account when prompted. Troubleshooter diagnostics may run for a standard user, but service changes, system-file repair, and cache resets require elevation.
Run Microsoft’s Windows Update troubleshooter
Windows 11
Open Settings > System > Troubleshoot > Other troubleshooters. Find Windows Update, select Run, and apply any repair Windows offers. Restart the computer, then open Settings > Windows Update and select Check for updates.
#1 Best Overall
- USB-C 2-in-1 storage OTG: The Lexar JumpDrive Dual Drive D40E features USB Type-A and Type-C connectors in a slim, portable form factor for easy device compatibility
- Transfer speeds up to 100MB/s: Based on internal testing, performance may vary depending upon the host device, interface, and usage conditions. 1MB=1,000,000 bytes
- Plug and Play: Widely compatible with USB Type-C smartphones, tablets, laptops, Macs, and traditional Type-A devices, no software installation required. The 360° swivel design allows for easy switching between connectors without the hassle of losing a cap
- Durable & Compact: The Lexar D40E USB memory stick features a metal enclosure, withstands temperatures from 0° to 50° C (32°F to 122°F), and is lightweight at 26g with dimensions of 70.4 x 16.9 x 11.7mm
- Security & Warranty: Securely protects files using an advanced security software solution with 256-bit AES encryption. Backed by a Lexar 3-year limited warranty
Windows 10
Open Settings > Update & Security > Troubleshoot > Additional troubleshooters. Select Windows Update, choose Run the troubleshooter, apply the recommended action, restart, and check for updates again.
Microsoft describes this as the first-line response: “If you get an error code while downloading and installing Windows updates, the Update Troubleshooter can help resolve the problem.” If the troubleshooter reports that it could not identify the issue, continue with the code-specific steps rather than repeatedly running it.
Use the error code to choose the next fix
These codes point to different failure classes. Start with the least-invasive action in the table, then move to administrator-level repair only if the error persists.
| Error code | Likely cause | Least-invasive next step | Privilege and security considerations |
|---|---|---|---|
0x8007000d |
Damaged update files or a corrupted Windows Update cache | Restart, run the troubleshooter, then reset the update cache if the code returns | Cache reset requires an administrator Command Prompt; it does not require disabling security protection |
0x800705b4 |
An interrupted or unusually long-running update | Keep the device on power and a stable network, restart, and retry after the troubleshooter | Administrator access may be needed for later service repairs; avoid repeatedly forcing shutdowns during installation |
0x800f0922 |
Insufficient free space or a Windows component problem | Free space, restart, and retry; use system-file repair if the error remains | Storage cleanup is low risk; DISM and SFC require an elevated terminal |
0xC1900101 |
An incompatible or failing device driver | Disconnect unnecessary peripherals and update or remove the driver identified by Windows or the device manufacturer | Driver changes require care and often administrator approval; do not remove an essential driver without a recovery plan |
0x80070005 |
Permissions or access denied | Sign in with an administrator account, restart, and run the troubleshooter again | Do not grant broad permissions to system folders; use elevation only for the documented repair command |
0x80070422 |
The Windows Update service is disabled | Check the Windows Update and Background Intelligent Transfer Service (BITS) services and set them to an enabled, running state | Changing services requires administrator rights; re-enable protection after any troubleshooting that pauses security software |
A code is a direction, not a diagnosis. For example, 0x800f0922 can reflect either storage pressure or a component failure, so check free space before attempting a deeper repair. Likewise, 0xC1900101 is associated with drivers, not a corrupted download cache.
Rank #2
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]
Check services, permissions, and security software
Confirm Windows Update and BITS are available
Press Windows key + R, enter services.msc, and press Enter. Locate Windows Update and Background Intelligent Transfer Service. If either service is stopped, right-click it and choose Start. If it is disabled, open Properties, change Startup type to an enabled option, select Apply, and then Start. Restart Windows before checking again.
Do not change unrelated services at random. The 0x80070422 code specifically makes disabled-service checks worthwhile; changing services will not fix a driver error or a full disk.
Use the correct account
When Windows asks for credentials, approve the elevation prompt with an administrator account. A standard account may be able to open Settings but cannot stop update services, rename protected folders, or repair the component store. If this is a work-managed PC, local policy may prevent those actions; contact the organization’s administrator instead of bypassing policy.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Test for interference from third-party security software
Microsoft includes temporary removal or disabling of third-party antivirus and security software in advanced troubleshooting because it can lock files or filter update traffic. Use this only as a controlled test and only as Microsoft directs:
Rank #3
- What You Get - 2 pack 64GB genuine USB 2.0 flash drives, 12-month warranty and lifetime friendly customer service
- Great for All Ages and Purposes – the thumb drives are suitable for storing digital data for school, business or daily usage. Apply to data storage of music, photos, movies and other files
- Easy to Use - Plug and play USB memory stick, no need to install any software. Support Windows 7 / 8 / 10 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, compatible with USB 2.0 and 1.1 ports
- Convenient Design - 360°metal swivel cap with matt surface and ring designed zip drive can protect USB connector, avoid to leave your fingerprint and easily attach to your key chain to avoid from losing and for easy carrying
- Brand Yourself - Brand the flash drive with your company's name and provide company's overview, policies, etc. to the newly joined employees or your customers
- Save your work and disconnect from untrusted networks before changing protection.
- Pause or remove the third-party product using its documented control, not by deleting its folders.
- Restart and attempt the update once.
- Re-enable or reinstall protection immediately after the test, whether the update succeeds or fails.
Windows Security and a third-party product can also conflict when both attempt real-time scanning. Do not leave the device unprotected while experimenting.
Repair Windows system files with DISM and SFC
Use system-file repair when the error points to damaged components, when the troubleshooter cannot repair Windows Update, or when 0x800f0922 continues after freeing storage. These commands modify the operating system, so back up first and use an elevated terminal.
- Open Start, type Command Prompt or Terminal, right-click the result, and select Run as administrator.
- Run the Deployment Image Servicing and Management command:
DISM /Online /Cleanup-Image /RestoreHealthAllow the command to finish. It can appear paused while Windows examines or repairs the component store. Do not close the window because progress is not changing quickly.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →- After DISM completes, run System File Checker:
sfc /scannow- Restart Windows, then return to Windows Update and select Check for updates.
If either command reports that it could not complete, record the exact message. Repeating the same command without addressing the reported condition rarely changes the outcome; proceed to the cache reset or obtain administrator support.
Rank #4
- GOOD VALUE PACKAGE - 1 Pack 32GB Memory Stick USB 2.0 Flash Drives with great cost performance and high quality.
- BIG CAPACITY - The available capacity: 29.10GB-29.8GB, You can save the data of movies, music, photos, designs, programs, manuals, handouts in a high speed.Good performance in digital data storing, transferring and sharing with families, friends, workmates, clients and machines.
- EASY TO USE & PLUG AND WORK - Support windows 7 / 8 / 10 / Vista / XP / 2000 / ME / NT Linux and Mac OS, Compatible with USB2.0 and below.
- TWISTTURN DESIGN & EASY CARRY - The metal clip rotates 360° round the ABS plastic body which with rubber oil skin feeling finish. The capless design can avoid lossing of cap, and providing efficient protection to the USB port.
- WARRANTY & SUPPORT - SIMMAX logo is laser printed on the USB connector surface, our products are of good quality and we promise that any problem about the product within one year since you buy.
Reset the Windows Update cache
A damaged download or metadata cache is a common explanation for 0x8007000d and repeated failures at the same percentage. Microsoft labels the command-line procedure for people comfortable with administrator permissions. It renames the existing cache folders so Windows can create clean replacements; it does not erase personal documents.
Command-line procedure
- Open Command Prompt or Terminal as administrator.
- Stop Windows Update and BITS:
net stop wuauserv
net stop bits- Rename the two cache locations:
ren C:WindowsSoftwareDistribution SoftwareDistribution.old
ren C:WindowsSystem32catroot2 Catroot2.old- Start the services again:
net start bits
net start wuauserv- Restart the computer. Open Windows Update and select Check for updates.
If a command says the service is not started, continue with the stop sequence; if it says a folder is in use, close Settings and other update-related windows, restart, and try again from an elevated prompt. Do not rename arbitrary folders under C:Windows.
What a successful reset looks like
Windows recreates the renamed folders and downloads update metadata again. The first scan can take longer than usual because the cache is empty. A reset will not correct an incompatible driver, a disabled service, or a permission policy, so return to the error-code table if the same code immediately reappears.
Recommended Free Tools
When Windows Update is stuck at 0% or 100%
Stuck at 0%
Zero percent usually means Windows has not begun transferring or processing the package. Verify the network, confirm free space, check that Windows Update and BITS are running, and restart before resetting the cache. If the same download fails with 0x8007000d, cache repair is more appropriate than repeatedly selecting Retry.
Best Value
- 【16GB Flash Drive】USB flash drives with 16GB capacity, meet your needs of daily use on work, school, home and travelling for photos, music, videos, files storage and transfer. IMEASON thumb drives can be used to store different files, easy to data backup.
- 【Metal Swivel Cap Design】USB thumb drive is metal swivel cover provides extra protection for the usb thumbdrive connector, no usb drive cap to lose; keychain design makes it easier to carry without worrying lose it.
- 【Wide Compatibility】USB drive supports Windows 7/8/10/11 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, also Supports USB 2.0 and 1.1 ports. USB Stick support TV, desktop, notebook computer, car, audio and other device. The USB Memory Stick is your great data storage and transfer companion with traveling and working.
- 【Easy to use】usb memory stick is plug and play without any software installation. Just simply plug the Flashdrive into the port of your USB-compatible devices such as computer, laptop to start data storage or transmission.
- 【What You Get】16 GB USB Flash Drive Thumb Drive, The default format of the usb storage flash drive is FAT32.
Stuck at 100%
One hundred percent can mean the download is complete while installation, servicing, or the required restart is still pending. Keep the computer connected to power, allow the current operation to finish, and use Restart when Windows offers it. If Windows returns to the desktop and reports failure after every restart, record the code and KB number, then follow the matching repair path above.
A forced power-off during an active installation can leave Windows in a recovery state. Use the power button only when the computer is genuinely unresponsive and no normal restart option works.
Roll back a recently installed update in Windows Recovery Environment
If the problem began immediately after an update and Windows cannot start normally or repeatedly fails during boot, Windows Recovery Environment (WinRE) can uninstall the latest quality update. This is a recovery action, not a routine fix.
- Open Settings > System > Recovery in Windows 11, or the equivalent recovery controls in Windows 10, and choose the option to restart into advanced startup. If Windows cannot reach Settings, interrupt startup as directed by the on-screen recovery process until WinRE appears.
- Select Troubleshoot > Advanced options > Uninstall Updates.
- Choose Uninstall latest quality update and follow the prompts.
- Restart Windows, confirm that the device starts, and investigate the original update failure before attempting another installation.
Microsoft warns users to understand the risk before uninstalling a security update: removing it reduces protection until a corrected update is installed. Do not use this option simply because an update takes a long time, and do not remove a feature update when the failure concerns a quality patch unless WinRE specifically presents that choice.
Windows 10 support ended on October 14, 2025
Microsoft states: “After October 14, 2025, Microsoft will no longer provide free software updates from Windows Update, technical assistance, or security fixes for Windows 10.” Because that date has passed, a Windows 10 computer may fail to receive current security patches through the normal free Windows Update service even after local troubleshooting succeeds.
First determine whether the device is actually running Windows 10 and whether it is eligible for a supported Windows 11 installation. If it is, plan a supported migration after backing up your files and checking application and hardware compatibility. If it is not eligible, consult your organization or hardware provider about a supported replacement or lifecycle option. Do not interpret a successful cache reset as restoration of Windows 10’s ended security-support program.
A practical decision checklist
- Unknown code: record the code and KB number, back up, restart, check network and space, then run the correct troubleshooter for your Windows version.
0x8007000d: repair the update cache after the basic sequence.0x800705b4: allow a stable, uninterrupted attempt and retry after restarting.0x800f0922: free storage first, then use DISM and SFC if the error persists.0xC1900101: investigate drivers and unnecessary peripherals rather than deleting cache folders.0x80070005: use an administrator account and check policy or permissions.0x80070422: enable and start Windows Update and BITS.- Failure after third-party security changes: restore protection immediately and seek the product’s documented compatibility guidance.
- Failure immediately after a patch: use WinRE only when necessary, recognizing that uninstalling a security update lowers protection.
- Windows 10 in 2026: treat migration to a supported Windows 11 installation as a security decision, not merely another troubleshooting step.
Stop and obtain professional or organizational support when the machine cannot boot, the drive is failing, an administrator account is unavailable, or recovery repeatedly fails. Preserve the recorded error code, KB number, and exact command output so the next technician can work from evidence rather than repeated guesses.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
