The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →The SFC error “Windows Resource Protection could not start the repair service” usually appears when Windows cannot launch the repair components that System File Checker depends on. Instead of scanning and replacing damaged system files, SFC stops early because a required service, permission, registry setting, or repair source is unavailable.
On Windows 10 and Windows 11, the most common cause is the Windows Modules Installer service not running or being disabled, but the issue can also involve corrupted component store files, damaged servicing settings, or a system environment where SFC cannot access protected files properly. Fixing it typically starts with checking the right services and running SFC from an elevated Command Prompt, then moves to DISM, Safe Mode, or offline repair if needed.
For an SFC repair-service failure, Outbyte PC Repair can scan Windows components and settings before you retry system repair.
As an Amazon Associate I earn from qualifying purchases.
What the Error Means
The message “Windows Resource Protection could not start the repair service” appears when System File Checker cannot launch the Windows repair mechanism it needs to verify and restore protected system files. SFC depends on Windows Resource Protection, which monitors critical operating system files, folders, and registry keys. When SFC finds a damaged or modified protected file, it attempts to replace it with a known-good copy from the Windows component store. If the repair service cannot start, the scan stops before it can complete that work.
In most cases, this error points to a problem with the Windows Modules Installer service, also known by its service name TrustedInstaller. This service is responsible for installing, modifying, and repairing Windows components, including updates and protected system files. If TrustedInstaller is disabled, stuck, missing, blocked by policy, or unable to access required files, SFC may fail with this exact message on Windows 10 or Windows 11.
#1 Best Overall
- rv toilet brush: Engineered specifically for RVs, this brush features a silicone head that gently cleans without damaging the toilet bowl or seals, a must for traditional toilet brushes.
- Compact Wall-Mounted Toilet Brush: With its space-saving design, this brush is easy to stow away discreetly, perfect for the limited space in RVs.
- silicone toilet brush: This brush is designed for thorough cleaning of the toilet bowl without causing any harm to the porcelain or seals. The drip-free toilet brush holder is crafted to collect water from the brush, preventing any mess on your RV's floor.
- Wall-Mounted Toilet Brush for RV Travel: The brush head is conveniently attachable to the bathroom wall, ensuring that there's no rolling around during your trips. With this setup, you can travel with peace of mind, knowing your toilet brush is securely in place.
The error can also occur when the command is not run with administrative rights. A normal Command Prompt or terminal window does not have enough permission to start protected repair operations. That is SFC should be run from an elevated Command Prompt, Windows Terminal, or PowerShell session opened with Run as administrator. Without elevation, Windows may prevent SFC from accessing protected locations or interacting with the repair service.
Other common causes include component store corruption, damaged service configuration, incorrect registry permissions, pending Windows updates, disk errors, or security software interfering with system repair operations. On severely damaged installations, Windows may boot normally but still be unable to start the underlying servicing components SFC needs. In those cases, DISM, Safe Mode, or an offline scan from Windows Recovery Environment may be required before SFC can run successfully.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall| Possible cause | What it affects | Typical fix |
|---|---|---|
| Windows Modules Installer is disabled | Prevents SFC from starting protected repair tasks | Set the service to manual start and start it |
| Command prompt is not elevated | Blocks access to protected system locations | Run Command Prompt or Terminal as administrator |
| Component store corruption | Leaves SFC without usable repair source files | Repair with DISM, then rerun SFC |
| File system or permission problems | Stops Windows from reading or replacing protected files | Check disk health and repair service permissions |
This error does not always mean Windows is beyond repair. It usually means the servicing layer that SFC relies on is unavailable or misconfigured. The practical fix is to confirm the required service can run, use an elevated repair session, repair the component store if needed, and then rerun SFC under normal Windows, Safe Mode, or offline recovery conditions.
Check and Start the Windows Modules Installer Service
The most common service behind the SFC error “Windows Resource Protection could not start the repair service” is Windows Modules Installer, also known by its service name, TrustedInstaller. SFC depends on this service to inspect and replace protected Windows system files. If the service is disabled, stuck, missing, or blocked by policy, SFC may fail before it can begin the scan.
On Windows 10 and Windows 11, Windows Modules Installer is normally set to Manual startup. That is expected. It does not need to run all the time, but Windows must be able to start it when system maintenance, updates, DISM, or SFC require it. Avoid setting it to Disabled, and be cautious with third-party “debloat,” registry cleaner, or update-blocking tools that may change this service configuration.
Start the service from the Services console
- Press Windows + R, type services.msc, and select OK.
- Find Windows Modules Installer in the list.
- Double-click it and check Startup type.
- Set it to Manual if it is set to Disabled.
- Select Apply, then select Start if the button is available.
- Select OK, close Services, and try running SFC again from an elevated Command Prompt.
If the Start button is greyed out, the service may already be running, or the current account may not have enough administrative rights. Sign in with an administrator account and try again. If the service starts and then stops immediately, that can be normal when there is no active repair task, but SFC should still be able to call it when needed.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Check the service from Command Prompt
You can also verify and start TrustedInstaller from an elevated Command Prompt. Open the Start menu, type cmd, right-click Command Prompt, and choose Run as administrator. Then run these commands one at a time:
- sc query trustedinstaller — checks the current service state.
- sc config trustedinstaller start= demand — sets startup to Manual.
- net start trustedinstaller — attempts to start the service.
Pay close attention to the spaces in the sc config command: start= demand must include a space after the equals sign. If the command returns Access is denied, the Command Prompt is not elevated or administrative rights are restricted by policy. If it returns that the service name is invalid, the service entry may be damaged, and you should continue with DISM and deeper service repair steps later in the troubleshooting process.
Confirm related update services are not disabled
Although SFC primarily relies on Windows Modules Installer, related servicing components can affect repair operations, especially when DISM or Windows Update is needed afterward. In services.msc, check that these services are not set to Disabled:
| Service | Recommended startup type |
|---|---|
| Windows Modules Installer | Manual |
| Windows Update | Manual or Automatic |
| Background Intelligent Transfer Service | Manual |
| Cryptographic Services | Automatic |
After correcting the service settings, restart the PC. Then open an elevated Command Prompt and run sfc /scannow again. If the same Windows Resource Protection message appears, the service configuration may not be the only issue, and the next step is to confirm that SFC is being launched with full administrative privileges.
Rank #2
- Easy Identification: Made of a high quality zinc alloy, with a transparent cover and color coded
- 14 Most Common Fuses: Standard and Mini. (5A/ 7.5A/ 10A/ 15A/ 20A/ 25A/ 30A)
- Wide Applications: Fits most vehicles like car, truck, marine, SUV, travel trailer and other vehicles
- Note: Please use the right amp fuse to protect the vehicle and electronic equipment from short-circuit/overload
- ll Sizes You Need: The package contains 140pcs fuse and 2pcs fuse puller - 70pcs standard fuse and 70pcs mini fuse. (10pcs of each AMP)
Run SFC from an Elevated Command Prompt
After confirming that the Windows Modules Installer service is available, run System File Checker from an elevated Command Prompt. A normal Command Prompt window does not have the rights needed to access protected system files, start repair-related services, or write replacement files into Windows system folders. On Windows 10 and Windows 11, this is one of the most common reasons SFC fails or returns the message that Windows Resource Protection could not start the repair service.
To open the correct console, right-click Start and select Terminal (Admin), Windows PowerShell (Admin), or Command Prompt (Admin), depending on what appears on your system. You can also open the Start menu, type cmd, right-click Command Prompt, and choose Run as administrator. If User Account Control asks for permission, select Yes. The window title should show Administrator, which confirms that the command session is elevated.
In the elevated window, run the standard SFC scan:
sfc /scannow
Leave the window open until verification reaches 100 percent. The scan may take several minutes, especially on systems with a slower drive or many Windows components to validate. Do not close the console, restart the PC, or interrupt the process unless it is clearly stuck for a long time. During the scan, SFC checks protected operating system files and attempts to replace incorrect, damaged, or missing versions with known-good copies from the Windows component store.
How to read the SFC result
- Windows Resource Protection did not find any integrity violations: SFC ran correctly and did not detect protected system file corruption.
- Windows Resource Protection found corrupt files and successfully repaired them: Restart Windows, then run sfc /scannow again to confirm the repair is clean.
- Windows Resource Protection found corrupt files but was unable to fix some of them: The component store may be damaged, so DISM should be used before running SFC again.
- Windows Resource Protection could not perform the requested operation: Try Safe Mode, check the disk for errors, or run SFC from the Windows Recovery Environment.
- Windows Resource Protection could not start the repair service: Recheck the Windows Modules Installer service and related permission or servicing problems before moving to offline repair methods.
If you receive the same repair service error even in an administrator window, restart the computer and try the command again before making deeper changes. A pending update, incomplete servicing operation, or locked system file can prevent SFC from starting correctly. After the restart, open an elevated Command Prompt again and rerun sfc /scannow. If Windows Update was recently installing patches, allow updates to finish first by going to Settings > Windows Update and completing any required restart.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsYou can also run a targeted verification command if you want to test whether SFC can access the repair infrastructure without performing a full repair pass. In the same elevated window, use sfc /verifyonly. This checks file integrity but does not repair files. If /verifyonly works but /scannow fails, the issue is more likely related to repair access, the component store, or servicing permissions rather than basic SFC execution.
For troubleshooting records, SFC writes details to the CBS log at C:\Windows\Logs\CBS\CBS.log. This file can be large, but it is useful when you need to confirm which files were repaired or which ones failed. If SFC still cannot start the repair service after being launched from an elevated prompt, the next practical step is to repair the Windows component store with DISM and then repeat the SFC scan from the same administrator console.
Use DISM to Repair the Windows Component Store
If the Windows Modules Installer service is available and you are running Command Prompt or Windows Terminal as an administrator, but SFC still reports that Windows Resource Protection could not start the repair service, the next step is to repair the Windows component store. SFC relies on this store, located under WinSxS, to replace damaged or missing protected system files. When the store itself is corrupted or incomplete, SFC may fail before it can begin or may be unable to complete repairs.
On Windows 10 and Windows 11, use the Deployment Image Servicing and Management tool from an elevated terminal. Right-click Start, choose Terminal (Admin) or Windows PowerShell (Admin), then run the health checks in this order:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Check for corruption: DISM /Online /Cleanup-Image /CheckHealth
- Scan the image more thoroughly: DISM /Online /Cleanup-Image /ScanHealth
- Repair the component store: DISM /Online /Cleanup-Image /RestoreHealth
The /Online switch targets the currently running Windows installation. /Cleanup-Image tells DISM to service the Windows image, and /RestoreHealth attempts to download or use available repair files to fix corruption. The repair phase can remain at certain percentages for a long time, especially around 20% or 40%, so let it finish unless it has clearly stopped responding for an extended period. After DISM completes successfully, restart the PC and run sfc /scannow again from an elevated terminal.
If DISM Cannot Download Repair Files
DISM normally uses Windows Update as a repair source. If Windows Update is blocked by policy, unavailable, or damaged, RestoreHealth may fail with source-related errors such as 0x800f081f. In that case, mount a Windows ISO that matches your installed edition, language, and build as closely as possible, then point DISM to the install image. After mounting the ISO, check the drive letter, then look in the sources folder for either install.wim or install.esd.
Rank #3
- ✅ Organize Your Freezer with a Complete Ice System: This ice cube tray with lid and bin set solves freezer clutter by combining 4 silicone ice cube trays, a central storage container, and a scoop. Keep your kitchen tidy while always having ice ready for daily drinks, cooking, or entertaining.
- ✅ Easy-Pop Ice Release with Secure Non-Spill Lids: Each silicone ice tray features a flexible bottom for effortless ice cube removal—simply push from below. The ice tray with lid has lift tabs for easy handling and minimizes spills when moving (note: lids allow airflow and are not airtight).
- ✅ Maximize Freezer Space with Stackable Design: These ice trays for freezer stack neatly to save vertical space. Perfect for compact apartment freezers, RV refrigerators, or organizing multiple ice cube trays for freezer for parties and home use.
- ✅ BPA-Free and Odor-Resistant for Pure Ice Taste: Made from food-grade silicone and durable plastic, these ice trays resist absorbing freezer odors. Ensure clean, tasteless ice for your cocktails, coffee, or family meals with these BPA-free ice trays.
- ✅ Versatile and Dishwasher Safe for Easy Cleanup: Create clear cubes or infuse with fruits for flavored ice. The entire ice bucket kits set is top-rack dishwasher safe, making cleanup simple and convenient after parties or daily use.
Use a source command that matches the file type. For example, if the ISO is mounted as drive D: and contains install.wim, run DISM /Online /Cleanup-Image /RestoreHealth /Source:wim:D:\sources\install.wim:1 /LimitAccess. If it contains install.esd, use DISM /Online /Cleanup-Image /RestoreHealth /Source:esd:D:\sources\install.esd:1 /LimitAccess. The index number must correspond to the Windows edition installed on the PC, such as Pro or Home; you can list indexes with DISM /Get-WimInfo /WimFile:D:\sources\install.wim or the equivalent path for an ESD file.
| DISM result | Next action |
|---|---|
| No component store corruption detected | Restart and run sfc /scannow again as administrator. |
| Corruption repaired successfully | Restart, then run SFC to repair protected system files. |
| Source files could not be found | Use a matching Windows ISO as the DISM source and include /LimitAccess. |
| DISM fails with service or access errors | Check Windows Update, TrustedInstaller, permissions, and security software interference. |
Run SFC in Safe Mode or Windows Recovery Environment
If SFC still returns “Windows Resource Protection could not start the repair service” after checking the Windows Modules Installer service and running DISM, try running the scan in a reduced Windows environment. Safe Mode loads only core drivers and services, which can prevent third-party antivirus tools, broken startup items, shell extensions, or management agents from interfering with the repair process. This is useful on Windows 10 and Windows 11 when SFC fails in a normal desktop session but Windows can still boot.
To start in Safe Mode, open Settings, go to System > Recovery on Windows 11, or Update & Security > Recovery on Windows 10, then choose Restart now under advanced startup. After the PC restarts, select Troubleshoot > Advanced options > Startup Settings > Restart, then press 4 or F4 for Safe Mode. Once signed in, open Command Prompt or Windows Terminal as administrator and run:
sfc /scannow
If the same repair-service error appears in Safe Mode, run SFC from the Windows Recovery Environment instead. WinRE works outside the installed Windows session, so it can repair files that are locked, affected by damaged services, or blocked by permissions inside the live operating system. From the advanced startup screen, choose Troubleshoot > Advanced options > Command Prompt. You may be asked to select an administrator account and enter its password before the command window opens.
In WinRE, drive letters may not match what you see in File Explorer. Windows is often mounted as D: instead of C:. Before running an offline scan, identify the correct Windows partition by checking for the Windows folder. For example, try dir C:\Windows, then dir D:\Windows, and continue until you find the installed Windows directory. You can also use bcdedit and look for the osdevice entry to confirm the Windows volume.
After identifying the correct drive letter, run SFC against the offline Windows installation using the offline boot and Windows directory switches. If Windows is on D:, the command is:
sfc /scannow /offbootdir=D:\ /offwindir=D:\Windows
Wait for the scan to complete before closing the window or restarting. Offline SFC can take longer than a standard scan, especially on systems with slow disks or heavy corruption. When it finishes, restart normally and run sfc /scannow again from an elevated command prompt inside Windows. A successful offline repair often restores enough servicing functionality for the normal SFC scan to run without the Windows Resource Protection repair-service error.
- Use Safe Mode first when Windows boots but normal SFC is blocked by background software or startup components.
- Use WinRE when Safe Mode fails, Windows is unstable, or system files appear to be locked or heavily damaged.
- Check drive letters carefully before using offline SFC, because WinRE commonly assigns different letters than Windows does.
Fix Service, Permission, or Registry Issues
If SFC still reports that Windows Resource Protection could not start the repair service after you have checked Windows Modules Installer and tried DISM, the problem may be deeper than a stopped service. SFC depends on several Windows servicing components, service permissions, file system access rights, and registry entries. If any of these are damaged or blocked by policy, cleanup tools, malware, or an incomplete update, the repair service may fail before the scan begins.
Check related services and startup settings
Open Services by pressing Windows + R, typing services.msc, and pressing Enter. Confirm that Windows Modules Installer is present and not disabled. Its service name is TrustedInstaller, and its startup type is normally Manual. Also check that Remote Procedure Call (RPC) and DCOM Server Process Launcher are running, since many Windows maintenance services depend on them. These two services should normally be set to Automatic.
If the Services console cannot change the setting, use an elevated Command Prompt or Windows Terminal. Run these commands one at a time:
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #4
- 【Food Grade Material】Made from eco-friendly PP+TPR material that is BPA Free and Food-Grade. The flexible material allows the dish strainers for kitchen counter to collapse flat for easy space-saving and storage, making the most of your kitchen countertop.
- 【Built-in Utensil Drying Rack】Separate storage area for utensils and gadgets, the non-slip dish drying rack is scratch-proof and offers a safe place for plates and cups, and has a separate compartment for cutlery. Perfect for storage and draining dinnerware and glassware.
- 【Compact and Portable】The collapsible dish drainer is simply pop-up to open when using and collapses to flat for space-saving storage, you can easily store it under the sink or slip it into any cabinet. Suitable for both indoors & outdoors uses, such as camping, BBQ, RV and boats, campsite cleanup, and vacation homes, etc.
- 【Drying Water Quickly】The collapsible dish storage rack versatile tool for all your household tasks, at the same time, will not hurt your hands or scratch the sink. The Bottom with an adjustable swivel drain strip allows water to run directly into the sink, keeping your counters clean and dry.
- 【Easy to Maintain】Heavy-duty plastic is simple to wipe clean, and there’s no rusting like the old clunky metal dish drying rack. The kitchen organizers for dishes is scratch-proof and offers a safe place for plates and cups, and prevent the rack from shifting and scratching any counter top.
- sc config trustedinstaller start= demand
- net start trustedinstaller
- sc query trustedinstaller
The space after start= is required. If the query shows the service as running, try sfc /scannow again from the same elevated window. If you receive Access is denied, The service does not exist, or a similar message, the issue is likely permission or registry related rather than a normal service startup failure.
Check permissions on servicing folders
Windows Resource Protection relies heavily on the C:\Windows\servicing, C:\Windows\WinSxS, and C:\Windows\System32 folders. These locations should not be manually owned by a normal administrator account. The built-in TrustedInstaller account must retain control over many protected files. If you previously changed ownership to delete files, apply tweaks, or remove components, restore default-style ownership where possible instead of granting broad permissions to Everyone.
For a quick check, right-click C:\Windows\servicing, select Properties, open the Security tab, and confirm that TrustedInstaller, SYSTEM, and Administrators appear with appropriate access. Avoid random permission reset commands from untrusted sources; they can break Windows servicing further. If permissions appear badly altered across many Windows folders, a repair install is usually safer than trying to rebuild every access control list manually.
Repair or verify the TrustedInstaller registry entry
The Windows Modules Installer service is registered under this registry path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrustedInstaller
Open Registry Editor only if you are comfortable working with the registry. Press Windows + R, type regedit, and press Enter. Before changing anything, export the TrustedInstaller key if it exists. Check that the Start value is not set to 4, which means disabled. A value of 3 represents manual startup and is typical for this service. If the entire key is missing, do not create random values by hand unless you have a known-good reference from the same Windows version and build.
- If Start is 4, change it to 3, restart Windows, then test SFC again.
- If the TrustedInstaller key is missing, run DISM again and consider an in-place repair upgrade.
- If registry editing is blocked, check Group Policy, endpoint security software, or malware protection logs.
Security software can also interfere with protected system repairs. Temporarily disable third-party antivirus tamper protection only long enough to test SFC, then enable it again. If the machine was recently infected, run a full Microsoft Defender Offline scan before attempting more repairs. Damaged services and changed permissions are common after malware removal, and SFC may not work until the underlying service configuration is restored.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What to Do If SFC Still Cannot Start the Repair Service
If SFC still returns “Windows Resource Protection could not start the repair service” after checking the Windows Modules Installer service, running an elevated Command Prompt, using DISM, and trying Safe Mode or Windows Recovery Environment, treat the issue as a deeper servicing-stack or system integrity problem. At this point, the goal is to repair Windows without depending only on the live SFC service path. Start by confirming that the system drive is healthy and that Windows can read required repair files reliably.
Recommended Free Tools
Check the disk and file system first
A failing drive or file-system corruption can prevent TrustedInstaller and Windows Resource Protection from loading correctly. Open an elevated Command Prompt and run a disk check against the Windows volume. For most systems, this is the C: drive:
- Run a read-only scan: chkdsk C:
- Schedule a repair scan: chkdsk C: /f
- Check for bad sectors if disk problems are suspected: chkdsk C: /r
If Windows says the volume is in use, approve the scan at the next restart, then reboot and let it complete. On SSDs, also check the drive’s health using the manufacturer’s utility or a trusted SMART monitoring tool. If the disk reports serious errors, back up files before attempting more repairs.
Best Value
- Advanced 6-Step Filtration Technology: Discover the impressive power of the Tastepure RV water filter’s Hex-Flow Technology and its 6-step filtration process. Each layer seamlessly works together to deliver water that’s exceptionally clean.
- Certified Lead-Free: This camping water filter is independently tested & listed to standards NSF/ANSI 42 & NSF/ANSI 53. It’s CSA lead-free content certified to NSF/ANSI 372 & compliant with all federal & state-level lead-free laws.
- Access to Pure, Great-Tasting Water: Enjoy clean water anywhere! This RV inline filter reduces bad tastes, odor, chlorine, sediment, etc. GAC filtration, combined with KDF controls bacteria & mold growth when the outdoor water filter isn’t in use.
- Patented Technology & Made in the USA: This in-line water filter is proudly made in the USA with top-notch materials and expert craftsmanship. The patented design has undergone rigorous testing and quality control to meet the highest standards.
- Versatile Applications: Easily attach this multi-purpose hose water filter to any standard garden or drinking water hose to receive cleaner drinking water. It’s great for campers, boats, pets, gardening, car washes, car detailing, & more.
Run an offline SFC scan with the correct Windows paths
When the running Windows installation cannot start the repair service, an offline SFC scan may still work from Windows Recovery Environment. Boot to Advanced startup, open Troubleshoot > Advanced options > Command Prompt, then identify the Windows drive letter. In recovery mode, Windows is not always assigned C:. Use diskpart, then list volume, or check folders with commands such as dir C:\Windows, dir D:\Windows, and dir E:\Windows.
After finding the correct Windows partition, run SFC with offline paths. For example, if Windows is on D:, use sfc /scannow /offbootdir=D:\ /offwindir=D:\Windows. This bypasses parts of the active Windows session and can repair protected files when the normal desktop scan cannot initialize the repair service.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteUse installation media for a stronger repair source
If the component store is damaged and local repair files are unusable, create Windows 10 or Windows 11 installation media on another PC using Microsoft’s Media Creation Tool. Boot from the USB drive and choose Repair your computer, not Install now. From there, use Command Prompt to run offline servicing commands or offline SFC against the installed Windows copy.
You can also perform an in-place repair upgrade from within Windows if the system still boots. Mount a matching Windows ISO, run setup.exe, and choose the option to keep personal files and apps. This refreshes Windows system files, servicing components, and default repair infrastructure without wiping user data. Match the ISO to the installed edition, language, and architecture where possible.
Escalate to reset, restore, or clean installation
If SFC, DISM, offline repair, and an in-place repair upgrade all fail, use a recovery option based on how much damage is present and how recent your backups are:
- System Restore: Roll back service configuration and system files to a restore point created before the error appeared.
- Uninstall recent updates: Remove the latest quality or feature update from Windows Recovery Environment if the problem started after updating.
- Reset this PC: Reinstall Windows while choosing whether to keep personal files. Desktop apps will need to be reinstalled.
- Clean install: Back up files, erase the Windows partition, and install a fresh copy when corruption, malware damage, or disk replacement makes repair unreliable.
Before choosing reset or clean installation, export data, recovery keys, browser profiles, license information, and application installers. If the machine is domain-joined or managed by an organization, coordinate with IT because repair actions can affect encryption, device enrollment, VPN software, and security agents.
Free tools Windows power users keep installed
One-click scans. No signup required.
Frequently Asked Questions
How do I fix “Windows Resource Protection could not start the repair service” in Windows 10 or Windows 11?
Start by opening Services and making sure Windows Modules Installer, also called TrustedInstaller, is not disabled. Set it to Manual, start the service, then open Command Prompt or Windows Terminal as administrator and run sfc /scannow again. If it still fails, run DISM to repair the component store before retrying SFC.
Which service does SFC need to run repairs?
SFC depends on the Windows Modules Installer service, whose service name is TrustedInstaller. This service manages Windows component servicing, updates, and protected system file repair. If it is disabled, missing, or cannot start because of permission or registry problems, SFC may show this repair service error.
What DISM command should I run before trying SFC again?
Open an elevated Command Prompt or Windows Terminal and run DISM /Online /Cleanup-Image /RestoreHealth. After DISM finishes, restart the PC and run sfc /scannow again. If DISM cannot download repair files, you may need to use a Windows ISO as the repair source.
Can I run SFC if Windows will not boot normally?
Yes, you can run SFC from Windows Recovery Environment using offline repair commands. Boot into Advanced startup, open Command Prompt, identify the Windows drive letter, then run SFC with offline paths such as sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows. The drive letter may be different in recovery, so check it with DiskPart or by browsing volumes first.
What should I do if TrustedInstaller will not start?
Check that the Windows Modules Installer service is set to Manual and that its registry entry exists under HKLM\SYSTEM\CurrentControlSet\Services\TrustedInstaller. Also confirm your administrator account has not been restricted by policy and that system folders such as C:\Windows\servicing have not had their permissions changed. If the service is damaged, an in-place repair upgrade is often the safest way to restore the missing service configuration without deleting personal files.
Bottom Line
The “Windows Resource Protection could not start the repair service” error usually means SFC cannot access the Windows servicing components it needs, often because TrustedInstaller, Windows Modules Installer, related services, permissions, or the component store are damaged or disabled. Start by checking the required services and running SFC from an elevated Command Prompt, then use DISM to repair the Windows image if SFC still fails.
If normal repairs do not work, boot into Safe Mode, Windows Recovery Environment, or installation media and run offline SFC and DISM commands against the correct Windows drive. Once the repair completes, restart Windows and run sfc /scannow again to confirm that system file protection is working properly.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →
