How to Manually Reset Windows Update Components (the Official Command Sequence)

When the troubleshooter doesn’t help and updates keep failing, the reliable fallback is to manually reset the Windows Update components — stop the services, clear the download cache, and start them again.

Why: Windows Update relies on a few services (BITS, the Update service, and the Cryptographic service) plus two cache folders, SoftwareDistribution (staged downloads) and catroot2 (update signatures). If either folder is corrupt or a service is wedged, every update fails the same way. Resetting them gives the updater a clean slate without reinstalling Windows.

Fix 1: Run the troubleshooter first

Before resetting by hand, let the built-in troubleshooter try — it resets components automatically and may save you the manual work.

1. Select Start → Settings → System → Troubleshoot → Other troubleshooters.
2. Under Most frequent, select Run next to Windows Update.
3. Restart, then Check for updates. Still failing? Continue below.

Fix 2: Reset the components manually

Open an elevated Command Prompt (right-click Start → Terminal (Admin)). Run each line and press Enter — first stop the three services:

net stop bits
net stop wuauserv
net stop cryptsvc

Then rename the two cache folders so Windows rebuilds them fresh:

ren %systemroot%\SoftwareDistribution SoftwareDistribution.old
ren %systemroot%\System32\catroot2 catroot2.old

Now start the services back up:

net start bits
net start wuauserv
net start cryptsvc

Restart the PC, then go to Settings → Windows Update → Check for updates. Windows recreates SoftwareDistribution and catroot2 automatically; once updates work you can delete the .old folders to reclaim the space.

If a net stop line reports “access is denied,” make sure the window really is elevated (the title bar should say Administrator).

Fix 3: Quick Update Agent reset

If you only want to clear the staged downloads without touching catroot2, Microsoft offers this shorter sequence in an elevated Command Prompt:

net stop wuauserv
rd /s /q %systemroot%\SoftwareDistribution
net start wuauserv

This deletes the SoftwareDistribution folder outright (instead of renaming it), then restarts the Update service. Reboot and check for updates.

FAQ

Is it safe to delete the SoftwareDistribution folder? Yes. It only holds staged update downloads and history. Windows rebuilds it on the next scan. You’ll lose your visible update history, but no installed updates are removed.

Should I run the sc.exe sdset permission-reset commands too? Only if the above doesn’t help. Microsoft warns that the sc.exe step overwrites the security permissions on the BITS and Windows Update services and resets them to default — skip it unless the standard reset has already failed.

Sources: Microsoft Learn — Additional resources for Windows Update (reset components manually), Microsoft Support — Troubleshoot problems updating Windows