Windows Defender Security Intelligence Update Fails with Error 80240016 on Windows 11

Question

Hello,

Thank you for your response.

I followed the suggested steps. I also ran DISM commands:

DISM /Online /Cleanup-Image /CheckHealth

DISM /Online /Cleanup-Image /ScanHealth

DISM /Online /Cleanup-Image /RestoreHealth

The component store was reported as repairable and RestoreHealth completed successfully.

However, the problem still remains. Wi

ndos Update is stuck and Microsoft Defender Security Intelligence Update is not installing correctly. The update stays at 0% installation while the cumulative update remains stuck downloading.

I have attached updated screenshots for reference.

Could you please advise the next troubleshooting step

Answer 1

Hi Vikrant Kumar Singh ,

Looks like you’ve done all the right things with the DISM commands; since /RestoreHealth completed successfully, your system image is clean now. The issue with Windows Update getting stuck is usually tied to the update cache or Windows Update services not refreshing properly after a repair.

Here’s what I’d suggest next:

Stop the Windows Update services using net stop wuauserv and net stop bits.

Then, delete the contents of C:\Windows\SoftwareDistribution (don’t worry, it’ll rebuild automatically).

Restart those services with net start wuauserv and net start bits.

Reboot your PC and try running the update again.

If it still hangs, you can run the Windows Update Troubleshooter from Settings → System → Troubleshoot → Other troubleshooters. It often clears residual update locks. Also, make sure your network connection is stable — Defender updates can stall if the connection drops mid-download.

Once you’ve done that, check if the updates start progressing past 0%. If they do, you’re good to go. If not, we might need to manually reset the update components or use the Windows Update Assistant.

If this guidance proves helpful, feel free to click “Accept Answer” so we know we’re heading in the right direction and let me know if you need any assistance. Thank you!

Answer 2

Use the following sequence to troubleshoot the stuck Windows Update and Defender Security Intelligence update, given that DISM has already repaired the component store successfully.

1. Reset Windows Update components
   Use an elevated Command Prompt and run these commands one by one, pressing Enter after each:

      net stop bits
      net stop wuauserv
      ren %systemroot%\SoftwareDistribution SoftwareDistribution.bak
      ren %systemroot%\System32\catroot2 catroot2.bak
      net start bits
      net start wuauserv
   

   Then restart Windows and try Windows Update → Check for updates again.
2. Run System File Checker after DISM
   Since DISM /RestoreHealth completed, run:

      sfc /scannow
   

   Wait for it to reach 100%, then reboot and retry Windows Update.
3. Manually update Defender security intelligence
   If the Defender update still fails through Windows Update, install it manually to confirm the engine can update:
   • Download the latest Defender security intelligence package from https://www.microsoft.com/wdsi/defenderupdates.
   • Run the downloaded file to install the definitions.
   If this succeeds but Windows Update still reports failures, the issue is with Windows Update, not Defender itself.
4. Check Defender update sources and fallback order (enterprise/managed devices)
   If the device is managed (for example via Group Policy, Intune, or WSUS):
   • Ensure Microsoft Defender Antivirus is the primary antivirus and not disabled by a third‑party product. When Defender is disabled, its security intelligence cannot update.
   • Verify the fallback order for Defender protection updates does not point first to a WSUS server that has no Defender security intelligence approved. Check: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUServer If a WSUS server is configured, make sure it has the MDAV security intelligence (KB2267602) approved, or temporarily change policy so that Microsoft Update is the first source.
5. General Windows Update repair (if still stuck)
   If updates continue to hang or fail after the above:
   • Run again in an elevated Command Prompt:

          DISM.exe /Online /Cleanup-image /Restorehealth
          sfc /scannow
     

   • Then run Windows Update once more.

If, after these steps, cumulative updates still will not install while Defender can be updated manually, follow the full Windows Update troubleshooting guidance (including clean restart and, if needed, in‑place repair/clean installation) from the Windows Update troubleshooting article.

---

References:

• Troubleshoot Microsoft Defender Antivirus Security intelligence not getting updated
• Troubleshooting Security Intelligence Updates from Microsoft Update source
• Troubleshoot problems updating Windows
• Fix Windows Update corruptions and installation failures
• DISM Operating System Package (.cab or .msu) Servicing Command-Line Options
• Windows Defender update - Microsoft Q&A
• Windows Update 2026-05 Preview Update (KB5089573) (26200.85424) - Microsoft Q&A