How to fix 0x80070422 when the Windows Update service is disabled
This error means a service Windows Update relies on is set to Disabled, most often the Windows Update service itself or BITS. The same code can appear for the Firewall and other features. Jump to your situation below or work through the methods in order.
By Neeraj Singh ~6 min Updated Jun 2026 93% found this helpful
Error message
0x80070422. Windows Update could not start because the service is not running or is disabled.
Summary
0x80070422 means a service that a feature depends on is set to Disabled. For Windows Update that is usually the Windows Update service (wuauserv) itself, or a dependency such as BITS (Background Intelligent Transfer Service) or Cryptographic Services. It often follows a system optimizer or tweak that turned services off, a malware cleanup, or a Group Policy. The very same error code shows up for the Windows Firewall and a few other features when their service is disabled. The fix is simple: open the Services console, set the relevant services to Manual or Automatic, start them, and retry. You can do the same from an elevated command prompt in a few lines.
What this error means
Windows features are driven by background services. Windows Update needs its own service plus helpers like BITS, which does the downloading, and Cryptographic Services, which verifies files. If any of those is set to Disabled, the feature cannot start and Windows returns 0x80070422.
So this is not corruption, it is a configuration switch in the off position. The usual reason is a third-party optimizer, a privacy tweak, or a Group Policy that disabled the service. Turning the service back on and starting it restores the feature immediately.
Common causes
The Windows Update service (wuauserv) is set to Disabled.
The BITS service is disabled.
Cryptographic Services is disabled.
A system optimizer or tweak turned the service off.
Group Policy disabled the service.
The Windows Firewall service is off (firewall variant of this code).
A malware cleanup left a required service disabled.
Expert insight
“0x80070422 is the least mysterious error in Windows, something is switched off. Usually it is the Windows Update service or BITS sitting at Disabled because an optimizer tool or a privacy tweak turned it off months ago. I open services.msc, set Windows Update and BITS to Manual, start them, and the update runs. Same code, same fix when it shows up for the firewall, the firewall service is just off.”
Manager, Tech Support & Operations · 19+ years fixing Windows and system errors
✓ How to fix it
Method 1
Enable the Windows Update service
1Press Win+R, type services.msc and open it.
2Find Windows Update, double-click it, set Startup type to Manual (or Automatic), click Start, then OK.
3Manual is the normal default for this service.
Method 2
Enable BITS and Cryptographic Services
1Do the same for Background Intelligent Transfer Service (BITS) and Cryptographic Services.
2Set each to Manual or Automatic and start it.
3These are required helpers for Windows Update.
Method 3
Or set and start from the command line
1From an elevated Command Prompt:
sc config wuauserv start= auto
sc config bits start= auto
net start wuauserv
net start bits
2Note the space after start= is required.
Method 4
Check Group Policy and the registry
1If the service will not stay enabled, a policy may be disabling it.
2Check Group Policy for a Windows Update policy, and the service Start value in the registry under the service key.
3Clear the policy if appropriate, then start the service.
Method 5
For the firewall variant
1If 0x80070422 appears for Windows Firewall, start the Windows Defender Firewall service the same way.
2Set it to Automatic and start it.
3The firewall feature then turns on.
Method 6
Retry and run the troubleshooter
1Run Windows Update again once the services are started.
2If it still fails, run the Windows Update troubleshooter.
3Reboot if prompted.
0x80070422 is a disabled-service problem, not corruption, so the fix is to turn the service back on. For Windows Update that is wuauserv plus BITS and Cryptographic Services, set to Manual or Automatic and started. The identical code for the firewall is fixed the same way by starting the firewall service.
Frequently asked questions
What does error 0x80070422 mean?
It means a service the feature depends on is set to Disabled. For Windows Update that is usually the Windows Update service itself or BITS; the same code appears for the firewall when its service is off.
How do I enable the Windows Update service?
Open services.msc, find Windows Update, set Startup type to Manual or Automatic, and click Start. Do the same for BITS and Cryptographic Services.
Why was the service disabled?
Commonly a third-party optimizer, a privacy tweak, a Group Policy, or a malware cleanup turned it off. Turning it back on restores the feature.
Can I fix it from the command line?
Yes. From an elevated prompt run sc config wuauserv start= auto and net start wuauserv, and the same for bits. The space after start= is required.
I get 0x80070422 for the firewall, not updates
It is the same cause. Start the Windows Defender Firewall service from services.msc, set it to Automatic, and the firewall turns on.
What if the service will not stay enabled?
A Group Policy or registry setting may be disabling it. Check for a Windows Update policy and the service Start value, clear the policy, then start the service.
Still not working?
If a service re-disables itself after you enable it, a policy or a leftover management tool is forcing it off. Check Group Policy and any remaining optimizer or endpoint-management software, and remove the rule that disables the service. You can also submit your error to us for a tailored fix.
