Published on November 11, 2026 · The mitza.es team

Windows updates are the cheapest defense a company has: every month they fix flaws that are already being exploited, such as the Outlook zero-day of November 2026. That is why a computer that doesn't update is a risk, not just an annoyance. This guide works for Windows 10 and Windows 11 and follows the order we recommend: start with the simplest thing and don't move on to the next step until you have tried the previous one.
First of all: is it really broken?
- Windows 10 without ESU: Windows 10 stopped receiving free security updates. If your computer is not enrolled in the Extended Security Updates (ESU) program, it won't update no matter how hard you try. You can see the options in Windows 10 ESU: what to do in your small business.
- Unsupported version: if your version of Windows 11 has reached the end of its lifecycle, it no longer receives patches. Check the date in our notice about the end of support for Windows 11 24H2.
- Computer managed by your company or your provider: if updates are controlled by a server or a console, the computer may be waiting its turn because of a policy. Ask before forcing anything.
- It's just slow: large cumulative updates can take quite a while, especially on old drives. Give it a reasonable amount of time and keep the laptop plugged in.
Step 1: the basics (5 minutes)
- Restart the computer and check for updates again: Settings → Windows Update → Check for updates. A half-finished update often completes after a restart.
- Check the connection and that the computer's date and time are correct. A wrong clock makes communication with Microsoft's servers fail.
- Free up disk space. Large updates need several gigabytes free. Delete temporary files with Disk Cleanup or with Settings → System → Storage.
- Disconnect what you don't need: USB sticks, external drives and, if you use a VPN, turn it off for a moment. If you have a third-party antivirus, turn off its protection for a few minutes and try again.
Step 2: run the Windows troubleshooter
Windows includes a tool that detects and fixes the most typical Windows Update failures.
- Windows 11: Settings → System → Troubleshoot → Other troubleshooters → Windows Update → Run.
- Windows 10: Settings → Update & Security → Troubleshoot → Additional troubleshooters → Windows Update → Run.
Apply the fixes it proposes, restart and check for updates again.
Step 3: note down the error code
If Windows Update shows a code (for example 0x80070002), write it down: it helps you work out where to look. Some of the most common ones, by their general meaning in Windows:
0x80070002: a required file can't be found (corrupted update caches).0x80070005: access denied (permissions, antivirus or policies).0x80070070: not enough space on the disk.0x80073712: corrupted system files.0x800f081f: the source files needed to install a component are missing.
The space and corrupted-file ones are solved with steps 1 and 4; the cache ones, with step 5.
Step 4: repair the system files (SFC and DISM)
Open the Start menu, type cmd, right-click “Command Prompt” and choose “Run as administrator”. Run these commands one by one, and wait for each to finish:
DISM /Online /Cleanup-Image /RestoreHealth
sfc /scannowThe first one repairs the Windows image using Microsoft's files; the second checks and repairs the system files. They can take a good while and look stuck: don't close the window. Restart when they finish and check for updates again.
Step 5: reset the Windows Update components
It's the classic remedy when the update cache is corrupt. In the same “Command Prompt” with administrator permissions, run these commands in order:
net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserverThis stops the update services, renames the two folders where Windows keeps its cache (they are recreated on their own) and starts the services again. Restart and check for updates; the first check may take longer than usual. If everything goes well, you can delete the .old folders afterwards.
Step 6: install the update manually
If one specific update always fails, you can download it from the Microsoft Update Catalog (search for its KB number) and install it manually. Choose the version that matches your Windows (architecture and edition). As an example, the cumulative updates for November 2026 are KB5131096 for Windows 10 (ESU) and KB5132061 or KB5131087 for Windows 11, depending on the version; check on Microsoft's own page which one applies to your computer.
Step 7: if nothing works
- In-place repair: download the Windows installation assistant or image from Microsoft's website and run the installation keeping files and apps. It reinstalls Windows on top of itself without deleting your data.
- Back up your important data first. If you don't have an organized system, take a look at the 3-2-1 rule.
- Hardware: a drive with errors or too little memory can cause repeated failures; if the computer is very old, it may be time to replace it.
- Resetting the computer is the last resort: it reinstalls Windows and, depending on the option, keeps or deletes your files.
In a company with several computers
- Take inventory of which computers have gone weeks without updating: they are the ones accumulating the most risk.
- Test first on one or two computers and roll out to the rest; for a bulletin with an already-exploited flaw, do it within a few days. The suggested deadlines are in our guide to reading a security advisory.
- Centralize updates with the management tools of your provider or your company, and check that the computers that spend little time in the office (laptops) are updating too.
- Keep a record of what has been applied and when. It will be useful for an audit, an insurer or the NIS2 regulation.
Quick questions
Is it safe to delete the SoftwareDistribution folder?
It is the update cache and Windows regenerates it. That is why we advise renaming it instead of deleting it: if something goes wrong, you can always get it back. You lose the visible update history, but not your files or your programs.
Why does the same update install again and again?
It usually means the installation fails on restart and Windows rolls it back. Look at the error code in the update history and apply steps 4 and 5.
Can I postpone updates?
You can pause them for a few days in Settings, but bulletins with exploited flaws should be installed quickly. A long pause leaves the computer exposed.
How we can help at Mitza
We review the update status of all your computers, fix the ones that get stuck and leave you a procedure to keep them up to date. Take a look at our computer repair and maintenance service, the IT maintenance for small businesses or write to us from the contact page.
Related reading: the October 2026 Patch Tuesday and the eighth Chrome zero-day of 2026.