How to Fix Windows Update Error 0x80070422
services.msc, set Windows Update to Automatic, and start it. Do the same for Background Intelligent Transfer Service (BITS). If the Start button is greyed out, check group policy or your antivirus. Full steps below.What error 0x80070422 means
Error 0x80070422 translates to "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it." When Windows Update tries to check for updates, it calls the Windows Update service (wuauserv) — and if that service, or one of the helper services it depends on, is disabled, the whole process fails with this code instead of a friendlier message.
This error almost never appears on its own. Something switched the service off: a third-party "privacy" or "debloater" utility, a group policy on a work or school PC, an overzealous antivirus suite, or occasionally malware trying to block security patches. The fix is correspondingly simple — turn the services back on — but you also want to find what turned them off so the problem doesn't return next week.
Common causes
- Windows Update service set to Disabled: the direct cause — the service can't start, so updates can't run.
- BITS or Cryptographic Services stopped: Windows Update depends on these helpers to download and verify packages.
- Group Policy blocking updates: common on Pro editions joined to a work or school domain.
- Third-party debloater or privacy tools: these utilities routinely disable Windows services to "optimize" the system.
- Malware or corrupt service configuration: malicious software disables updates to avoid removal; corruption can break service registration.
How to fix error 0x80070422 — step by step
Work through these fixes in order. Steps 1 and 2 resolve nearly all cases on home PCs.
- Set the Windows Update service to Automatic and start it. Press Win + R, type
services.msc, and press Enter. Scroll to Windows Update and double-click it. Set "Startup type" to Automatic, click Start, then click Apply and OK. The service should now show a status of "Running." - Start BITS and Cryptographic Services. In the same Services window, find Background Intelligent Transfer Service (BITS) and Cryptographic Services. Double-click each one, set the startup type to Automatic, and start it. Windows Update needs both: BITS handles the downloads and Cryptographic Services verifies package signatures.
- Run the Windows Update troubleshooter. Open Settings, go to System, then Troubleshoot, then Other troubleshooters. Click Run next to Windows Update and apply any fixes it recommends. The troubleshooter also re-registers update components that debloater tools may have broken.
- Check Group Policy for blocked updates. Press Win + R, type
gpedit.msc, and press Enter (Pro, Enterprise, and Education editions). Go to Computer Configuration, then Administrative Templates, then Windows Components, then Windows Update. Open "Configure Automatic Updates" and any related policies — they should be "Not configured," not "Disabled." Set any Disabled policy back to Not configured. - Reset the Windows Update components. Right-click Start and choose Terminal (Admin). Run
net stop wuauserv,net stop cryptSvc,net stop bits, andnet stop msiserver. Then runren C:\Windows\SoftwareDistribution SoftwareDistribution.oldandren C:\Windows\System32\catroot2 catroot2.old. Restart the services withnet start wuauserv,net start cryptSvc,net start bits, andnet start msiserver. - Check antivirus and remove debloater tools. Temporarily disable any third-party antivirus and uninstall privacy/debloater utilities that manage Windows services — these are the most common repeat offenders. Then run a full scan with Microsoft Defender to rule out malware that may have disabled the services deliberately.
Did this fix it? Quick checklist
- Windows Update service shows "Running" with Automatic startup
- Background Intelligent Transfer Service is running
- Windows Update checks for updates without the error
- No group policy is forcing updates off
If the Start button is greyed out in Services, a policy or registry setting is overriding you. On Pro editions, recheck gpedit.msc. On Home editions, the relevant registry key is HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv, where a Start value of 2 means Automatic — edit the registry only if you're comfortable doing so, and back it up first.
Frequently asked questions
What does error 0x80070422 mean?
Error 0x80070422 means 'The service cannot be started because it is disabled or has no enabled devices associated with it.' In practice, the Windows Update service — or one of the services it depends on — has been disabled, so the update process cannot run.
Why is my Windows Update service disabled?
The most common reasons are third-party privacy or debloater tools that switch the service off, group policies on work or school PCs, aggressive antivirus software, or malware. It rarely disables itself.
The Start button is greyed out in Services — what now?
A greyed-out Start button usually means a group policy or registry setting is forcing the service off. Check gpedit.msc under Windows Update policies first. On Home editions without gpedit, the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv with Start set to 2 means Automatic — but edit the registry carefully.
Can antivirus cause 0x80070422?
Yes. Some third-party security suites disable Windows Update or its helper services as part of their own update management, and malware can do the same deliberately to avoid being removed by security patches.