How to fix the 0x800f0922 Windows Update installation error
This update error has two classic causes: an active VPN that blocks the update servers, and too little free space in the small hidden system partition. A .NET fault can also trigger it. Jump to your situation below or work through the methods in order.
By Neeraj Singh ~8 min Updated Jun 2026 89% found this helpful
Error message
0x800f0922 CBS_E_INSTALL_FAILED. The update failed to install.
Summary
0x800f0922 (CBS_E_INSTALL_FAILED) has two textbook causes. The first is an active VPN: the update cannot reach the configuration servers it needs while the VPN is up, so it fails. The second is too little free space in the small hidden System Reserved / EFI System Partition, which security and feature updates use as working space. A damaged .NET Framework is a third common trigger, since many updates touch .NET. The fix follows the cause: disconnect the VPN and retry, free space in the reserved partition, repair .NET, and run DISM and SFC to clear any component-store corruption. Most cases are solved by the VPN or the partition, so start there.
What this error means
The CBS_E_INSTALL_FAILED code is a general install failure, but in practice 0x800f0922 clusters around a few specific causes. A VPN is top of the list, the update servicing stack needs to reach certain endpoints during the install and a VPN tunnel can block them, so the install stops.
The second is space. Updates stage files in the tiny System Reserved or EFI partition, and if that partition is nearly full the install cannot complete. Because that partition is hidden and only a few hundred MB, it fills up quietly over time. A damaged .NET Framework rounds out the common causes.
Common causes
An active VPN connection blocks the update servers.
The System Reserved or EFI System Partition is nearly full.
A .NET Framework component is damaged.
Corrupt Windows Update components.
The component store is corrupt.
Insufficient free space on the main system drive.
A pending reboot from a previous update.
Expert insight
“With 0x800f0922 I check two things before anything else, and they fix it most of the time. Is a VPN connected? Drop it and the install usually goes straight through, because the servicing stack could not reach what it needed through the tunnel. And is that tiny hidden system partition full? Security updates need a little room there, and it fills up silently. Clear those two, repair .NET if it is still stuck, and you are done.”
Manager, Tech Support & Operations · 19+ years fixing Windows and system errors
✓ How to fix it
Method 1
Disconnect the VPN
1Disconnect any VPN client and turn off a proxy, then run the update again.
2The update servicing needs to reach certain endpoints a VPN tunnel can block.
3This alone fixes many 0x800f0922 cases.
Method 2
Free space in the reserved partition
1Security and feature updates need free space in the small hidden System Reserved / EFI partition.
2If it is nearly full, clear old language packs and fonts, or use a tool to free space in that partition.
3Then retry the update.
Method 3
Repair the .NET Framework
10x800f0922 often follows a .NET fault. Run the Microsoft .NET Framework Repair Tool.
2Or disable and re-enable the .NET features in Windows Features.
3Then retry.
Method 4
Run DISM and SFC
1Run DISM /Online /Cleanup-Image /RestoreHealth then SFC /scannow to repair the component store and system files.
2Reboot and retry the update.
Method 5
Reset Windows Update components
1If it still fails, reset the update components and clear the SoftwareDistribution cache.
2Restart the update services and check again.
Method 6
Free main disk space and clear a pending reboot
1Make sure the main system drive has several GB free.
2Restart to clear any pending reboot from a prior update, then retry.
Two causes solve most 0x800f0922 cases: an active VPN and a full hidden system partition, so check those first. The reserved partition is small and fills up quietly, which is why security updates start failing there. Repair .NET and run DISM and SFC only if the VPN and partition checks do not clear it.
Frequently asked questions
What does error 0x800f0922 mean?
CBS_E_INSTALL_FAILED means the update failed to install. In practice it usually points at an active VPN, a full hidden system partition, or a damaged .NET Framework.
Why does a VPN cause 0x800f0922?
The update servicing stack needs to reach certain endpoints during the install, and a VPN tunnel can block them. Disconnecting the VPN lets the update reach what it needs and complete.
How does the system partition cause it?
Security and feature updates stage files in the small hidden System Reserved or EFI partition. If that partition is nearly full the install cannot finish, so you free space there and retry.
How is .NET involved?
Many updates touch the .NET Framework, so a damaged .NET install can trigger 0x800f0922. Running the .NET Framework Repair Tool, or re-enabling the feature, resolves that case.
What should I try first?
Disconnect any VPN and retry, then check the hidden system partition for free space. Those two fix most cases before you need to repair .NET or run DISM.
Does DISM help with this error?
Yes, if the cause is component-store corruption. Run DISM RestoreHealth then SFC after ruling out the VPN and partition, then retry the update.
Still not working?
If the update still fails after clearing the VPN, the partition and .NET, the update log can name the exact component. Check C:\Windows\Logs\CBS\CBS.log for the failing package, then target that component or install the update manually from the Microsoft Update Catalog. You can also submit your error to us for a tailored fix.
