Can't update Windows 10 or upgrade to 11 (Error: 0x80004002)

Question

Can't update Windows 10 or upgrade to 11 (Error: 0x80004002)

Brittany 0

I'm haven't been able to receive any Windows updates. Every time I hit retry, the error occurs.

I also tried upgrading to Windows 11 and got an error. I then downloaded the ISO directly and tried. Everything goes well until it says to wait for PC to restart then it stops and a popup appears saying it failed.

I tried so many fixes I found online. I tried running DISM in command prompt (as Admin!) and this is what I got:

C:\WINDOWS\system32>DISM.exe /Online /Cleanup-image /Restorehealth

Deployment Image Servicing and Management tool

Version: 10.0.19041.3636

Image Version: 10.0.19045.5737

Error: 0x80004002

No such interface supported

The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log

C:\WINDOWS\system32>sfc /scannow

Windows Resource Protection could not start the repair service.

I tried restarting service. When I try to stop Cryptographic Services:

C:\WINDOWS\system32>net stop cryptSvc

The following services are dependent on the Cryptographic Services service.

Stopping the Cryptographic Services service will also stop these services.

Avast Tools

Avast Antivirus

Do you want to continue this operation? (Y/N) [N]: Y

The requested pause, continue, or stop is not valid for this service.

More help is available by typing NET HELPMSG 2191. I tried downloading an ISO for Windows 10 and installing it, hoping it would fix any registry errors or whatever could be causing issues. It just ended the same way the Win11 installation did.

I would just like to fix this issue and upgrade to Win11 without losing my apps and files, if at all possible.

Ivan B 114.5K Reputation points Independent Advisor

2025-10-04T15:45:50.2633333+00:00

Hi ,

Did you manage to solve the problem??

Thanks
Brittany 0 Reputation points

2025-10-04T16:03:33.8533333+00:00

No, unfortunately. I ended up uninstalling my Avast virus scanner to see if that would help since it was blocking cryptSvc from stopping but it didn't make a difference.

And now when I try running RestoreHealth, I get "access is denied" even though I'm running it as admin.
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T16:17:53.3133333+00:00
Please share your CBS logs for analysis. To collect the CBS logs, open admin PowerShell and run:

GCI -Path 'c:\windows\logs\cbs', 'c:\windows\logs\dism\dism.log' | Compress-Archive -destination (join-path ([environment]::GetFolderPath('Desktop')) \CBS.zip)

This creates a file named CBS.zip on your desktop. Share it on OneDrive or GoFile.io and post the link here.
Ivan B 114.5K Reputation points Independent Advisor

2025-10-04T16:22:06.3933333+00:00

Hi ,

If possible, request the logs that Ramesh presented and adjust the link to the previous Google Drive logs that are still requesting access, make them available to anyone with a link.

Thanks
Brittany 0 Reputation points

2025-10-04T16:25:42.1633333+00:00
When I do that, I get this error:

Compress-Archive : The archive file C:\Users\Brittany\Desktop\CBS.zip already exists. Use the -Update parameter to

update the existing archive file or use the -Force parameter to overwrite the existing archive file.

At line:1 char:69

... dism.log' | Compress-Archive -destination (join-path ([environment]:: ...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : InvalidArgument: (C:\Users\Brittany\Desktop\CBS.zip:String) [Compress-Archive], IOExcept

ion

FullyQualifiedErrorId : ArchiveFileExists,Compress-Archive
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T16:27:12.09+00:00

Please delete C:\Users\Brittany\Desktop\CBS.zip and try that command again.
Brittany 0 Reputation points

2025-10-04T16:31:53.61+00:00
I get this error:

ZipArchiveHelper : The process cannot access the file 'C:\windows\logs\cbs\CBS.log' because it is being used by

another process.

At

C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Archive\Microsoft.PowerShell.Archive.psm1:632

char:30

... sArchived = ZipArchiveHelper $sourceFilePaths $destinationPath $compr ...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : PermissionDenied: (C:\windows\logs\cbs\CBS.log:String) [Write-Error], IOException

FullyQualifiedErrorId : CompressArchiveUnauthorizedAccessError,ZipArchiveHelper
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T16:34:17.68+00:00

See if you can copy the C:\Windows\Logs\CBS folder to the desktop.

Also, copy c:\windows\logs\dism\dism.log to the CBS folder on your desktop.

Zip the folder and share it.
Brittany 0 Reputation points

2025-10-04T16:39:22.2766667+00:00

https://drive.google.com/drive/folders/1EJ3WUngO5DQlMTiPjc9cB5pE_cv8CRjs?usp=sharing
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T16:53:38.4366667+00:00

Please use my SSU diagnostics VBScript (SSUDiag.vbs) to narrow down the issue.

Download my ssudiag.vbs script.

Unzip and run the enclosed script. Share the output log file on OneDrive or GoFile.io and post the link here.

Note: It does not modify anything on your system and does not require administrative rights.

Source code: https://gist.github.com/winhelponline/143020469e68d274e9db9d35f360439c
Brittany 0 Reputation points

2025-10-04T17:16:35.0366667+00:00

This?

https://drive.google.com/file/d/1TkXxnPzYUlayju-aILjbOkNpcCfj23kn/view?usp=sharing
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T17:19:12.7933333+00:00

Yes, got it. Will post a fix in a few minutes.

5 answers

Your answer

Ivan B 114.5K Reputation points Independent Advisor

2025-10-04T15:45:50.2633333+00:00

Hi ,

Did you manage to solve the problem??

Thanks
Brittany 0 Reputation points

2025-10-04T16:03:33.8533333+00:00

No, unfortunately. I ended up uninstalling my Avast virus scanner to see if that would help since it was blocking cryptSvc from stopping but it didn't make a difference.

And now when I try running RestoreHealth, I get "access is denied" even though I'm running it as admin.
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T16:17:53.3133333+00:00

Please share your CBS logs for analysis. To collect the CBS logs, open admin PowerShell and run:

GCI -Path 'c:\windows\logs\cbs', 'c:\windows\logs\dism\dism.log' | Compress-Archive -destination (join-path ([environment]::GetFolderPath('Desktop')) \CBS.zip)

This creates a file named CBS.zip on your desktop. Share it on OneDrive or GoFile.io and post the link here.
Ivan B 114.5K Reputation points Independent Advisor

2025-10-04T16:22:06.3933333+00:00

Hi ,

If possible, request the logs that Ramesh presented and adjust the link to the previous Google Drive logs that are still requesting access, make them available to anyone with a link.

Thanks
Brittany 0 Reputation points

2025-10-04T16:25:42.1633333+00:00

When I do that, I get this error:

Compress-Archive : The archive file C:\Users\Brittany\Desktop\CBS.zip already exists. Use the -Update parameter to

update the existing archive file or use the -Force parameter to overwrite the existing archive file.

At line:1 char:69

... dism.log' | Compress-Archive -destination (join-path ([environment]:: ...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : InvalidArgument: (C:\Users\Brittany\Desktop\CBS.zip:String) [Compress-Archive], IOExcept

ion

FullyQualifiedErrorId : ArchiveFileExists,Compress-Archive
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T16:27:12.09+00:00

Please delete C:\Users\Brittany\Desktop\CBS.zip and try that command again.
Brittany 0 Reputation points

2025-10-04T16:31:53.61+00:00

I get this error:

ZipArchiveHelper : The process cannot access the file 'C:\windows\logs\cbs\CBS.log' because it is being used by

another process.

At

C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Archive\Microsoft.PowerShell.Archive.psm1:632

char:30

... sArchived = ZipArchiveHelper $sourceFilePaths $destinationPath $compr ...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : PermissionDenied: (C:\windows\logs\cbs\CBS.log:String) [Write-Error], IOException

FullyQualifiedErrorId : CompressArchiveUnauthorizedAccessError,ZipArchiveHelper
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T16:34:17.68+00:00

See if you can copy the C:\Windows\Logs\CBS folder to the desktop.

Also, copy c:\windows\logs\dism\dism.log to the CBS folder on your desktop.

Zip the folder and share it.
Brittany 0 Reputation points

2025-10-04T16:39:22.2766667+00:00

https://drive.google.com/drive/folders/1EJ3WUngO5DQlMTiPjc9cB5pE_cv8CRjs?usp=sharing
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T16:53:38.4366667+00:00

Please use my SSU diagnostics VBScript (SSUDiag.vbs) to narrow down the issue.

Download my ssudiag.vbs script.

Unzip and run the enclosed script. Share the output log file on OneDrive or GoFile.io and post the link here.

Note: It does not modify anything on your system and does not require administrative rights.

Source code: https://gist.github.com/winhelponline/143020469e68d274e9db9d35f360439c
Brittany 0 Reputation points

2025-10-04T17:16:35.0366667+00:00

This?

https://drive.google.com/file/d/1TkXxnPzYUlayju-aILjbOkNpcCfj23kn/view?usp=sharing
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T17:19:12.7933333+00:00

Yes, got it. Will post a fix in a few minutes.

Answer 1

Hi ,

If that doesn't work, try following Ramesh's procedure to unlink your college account and any other related accounts from a personal laptop.

Then follow the procedure in the link below to reset the security policies: https://woshub.com/reset-local-group-policies-settings-in-windows/, under the "Reset Local Security Policy Settings to Default in Windows" option.

Restart the PC and follow the steps.

Open the command prompt (admin) and run the commands: sfc /scannow and dism /online /cleanup-image /restorehealth. Wait for the process to finish and restart the computer.

Then perform a clean boot and, if you want, uninstall applications that you don't use.

https://support.microsoft.com/en-us/topic/how-to-execute-a-simple-boot-start-in-windows-da2f9573-6eec-00ad-2f8a-a97a1807f3dd

Try updating using the update service or via ISO.

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Thanks

Answer 2

Ramesh 176.3K Volunteer Moderator

The following fix should resolve the issue.

Download SFCFix.exe by niemiro of Sysnative forums, and save this to your Desktop.
Download the file, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip. Drag the file SFCFix.zip onto the file SFCFix.exe and release it. See illustration image
When you see the prompt "Will you allow SFCFix to communicate with Sysnative servers?", type "n" for no. Press Enter to continue.
SFCFix will now process the script. It will take some time to complete. Upload the output file SFCFix.txt to your OneDrive.
Restart Windows and attempt to install updates.
Restart Windows and try running the following command:

DISM.exe /Online /Cleanup-image /Restorehealth

DISM should run correctly.

Brittany 0 Reputation points

2025-10-04T17:33:04.0533333+00:00

Here is the output file.

https://drive.google.com/file/d/12OAMeyIFdWtpH5Yh7X82I5Hdcg9DcmSZ/view?usp=sharing

Gonna restart windows now and see how it goes.
Ramesh 176.3K Reputation points Volunteer Moderator

2025-10-04T17:35:34.39+00:00

Great, the directives completed successfully. Error 0x80004002 should no longer occur.
Brittany 0 Reputation points

2025-10-04T18:25:04.8833333+00:00

I'm getting updates now! :D

Gonna try upgrading to Win11 again later.
Ivan B 114.5K Reputation points Independent Advisor

2025-10-04T18:27:06.8+00:00

Hi ,

That's good, I believe it worked with Ramesh.

Thanks
trashsushi 0 Reputation points

2025-11-28T05:48:17.84+00:00

Hey is there anyway you can enable the .ZIP please? im also having this issue and this is probably my last hope.
Ramesh 176.3K Reputation points Volunteer Moderator

2025-11-28T06:26:36.02+00:00

@trashsushi:

Please start a new thread and share your CBS logs like the OP did.

Answer 3

Ivan B 114.5K Independent Advisor

Hi ,

In this case, since it's a laptop configured with the Windows 10 Education system, it must be linked to an educational institution. From what I saw in the logs, there are policy errors causing errors.

Blocked by policy settings

You could check in the Settings > Accounts > Work and School Accounts tab ?

If it's a laptop that isn't personal, you'll need to check this possibility with the educational institution's IT department.

Thanks

Brittany 0 Reputation points

2025-10-04T17:25:08.31+00:00

It's a personal laptop. I just downloaded the education version while I was a student from the Azure site. I still have access to Azure and that's where I downloaded the ISO for Win11 Education.

I just checked and my college email still shows up under work and school accounts.

Answer 4

Ivan B 114.5K Independent Advisor

Hi ,

Are you requesting access and what is your laptop model or desktop configuration?

Thanks

Brittany 0

Copied this from dxdiag:

Machine name: LAPTOP-N1TNRQNE

           Machine Id: {000114B3-ECBB-4E94-8C89-2F0BFDD0E143}

     Operating System: Windows 10 Education 64-bit (10.0, Build 19045) (19041.vb_release.191206-1406)

             Language: English (Regional Setting: English)

  System Manufacturer: ASUSTeK COMPUTER INC.

         System Model: ASUS TUF Gaming A17 FA706IU_TUF706IU

                 BIOS: FA706IU.316 (type: UEFI)

            Processor: AMD Ryzen 7 4800H with Radeon Graphics          (16 CPUs), ~2.9GHz

               Memory: 16384MB RAM

  Available OS Memory: 15790MB RAM

            Page File: 14930MB used, 16648MB available

          Windows Dir: C:\WINDOWS

      DirectX Version: DirectX 12

  DX Setup Parameters: Not found

     User DPI Setting: 96 DPI (100 percent)

   System DPI Setting: 96 DPI (100 percent)

      DWM DPI Scaling: Disabled

             Miracast: Available, with HDCP

Microsoft Graphics Hybrid: Supported

DirectX Database Version: 1.7.4

       DxDiag Version: 10.00.19041.5438 64bit Unicode

Answer 5

Ivan B 114.5K Independent Advisor

Hi ,

If it is a laptop or desktop, if possible, could you provide the laptop model or your desktop configuration?

Access the $Windows.~BT\Sources\Panther folder in the root of your C drive. If it's not showing up, it may be hidden. Select Viewer > Options > View Options tab. Check Show hidden files.

Upload the setupact.log file to OneDrive or Google Drive and post the link here.

https://learn.microsoft.com/en-us/windows/deployment/upgrade/log-files

Thanks

Brittany 0 Reputation points

2025-10-02T22:37:58.0366667+00:00

https://drive.google.com/file/d/1xtwGB0-nJDUoX_2MbuH5FDvFZefrQE0p/view?usp=sharing

This was inside a folder at C:Windows/Panther/NewOS/Panther

There's also a setupactlog file at C:Windows/Panther/UnattendGC/ but it says I do not have access.
Ivan B 114.5K Reputation points Independent Advisor

2025-10-02T23:04:24.3633333+00:00

Hi ,

Is it possible to correct the link that is requesting access to the drive link you shared.

Thanks
Brittany 0 Reputation points

2025-10-04T16:28:14.07+00:00

I updated the link. You should have access now.

Share via

Can't update Windows 10 or upgrade to 11 (Error: 0x80004002)

5 answers

Your answer