“We Couldn’t Connect to the Update Service”: 7 Fixes for Windows 11/10

Applies to: Windows 11 and Windows 10, when Settings > Windows Update shows “We couldn’t connect to the update service” after you select Check for updates.

Why Windows Update can’t connect

Windows Update needs a working internet connection, correct DNS and an accurate clock to reach Microsoft’s update servers over an encrypted connection. The message appears when any of these steps fails. Common causes:

• No internet, a captive portal (hotel or café Wi-Fi sign-in page) or a very unstable connection.
• A wrong date, time or time zone.
• A VPN, proxy, DNS filter or third-party firewall blocking Microsoft’s update servers.
• Stopped or disabled update services.
• A damaged Windows Update cache.
• A short outage on Microsoft’s side, which usually clears within hours.

On a work or school PC, updates may come from your organisation’s own update server instead; if the message appears there, contact your IT department before changing anything.

Fix 1: Check the connection, date and time

1. Open a website in your browser. If it asks you to sign in to the network, do that first.
2. Restart the router and the PC.
3. Go to Settings > Time & language > Date & time, turn on Set time automatically and Set time zone automatically, then select Sync now.
4. Go back to Settings > Windows Update and select Check for updates.

A wrong clock is easy to miss and breaks secure connections to Microsoft’s servers, so don’t skip this step.

Fix 2: Run the Windows Update troubleshooter

On Windows 11, Microsoft now offers the Windows Update troubleshooter through the Get Help app: open Get Help and search for Windows Update troubleshooter. On Windows versions that still have the built-in troubleshooters, go to Settings > System > Troubleshoot > Other troubleshooters and select Run next to Windows Update. Restart afterwards and check for updates again.

Fix 3: Turn off VPN, proxy and third-party security

• Disconnect any VPN app and try again.
• Go to Settings > Network & internet > Proxy. Unless your network needs one, Use a proxy server should be off.
• Temporarily turn off third-party antivirus or firewall software (Microsoft lists this as an advanced step). Turn it back on once updates install.
• If you use an ad-blocking or parental-control DNS service, switch temporarily to your provider’s default DNS or a public one.

Fix 4: Reset DNS and the WinHTTP proxy

Windows Update’s background download service uses the system (WinHTTP) proxy setting, which can be left over from old VPN or company software even when the Settings proxy is off. Open Command Prompt as administrator and run:

ipconfig /flushdns
netsh winhttp show proxy
netsh winhttp reset proxy

If netsh winhttp show proxy shows Direct access (no proxy server), the proxy isn’t the problem. Only reset it on a home PC; company networks sometimes need a proxy set there. Restart the PC afterwards.

Fix 5: Check the update services

1. Press Win + R, type services.msc and press Enter.
2. Check Windows Update, Background Intelligent Transfer Service and Cryptographic Services. None of them should be Disabled.
3. If one is disabled, double-click it, set Startup type to Manual (or Automatic for Cryptographic Services), select Apply and then Start.

“Update blocker” and privacy tools often disable these services. If you used one, undo its changes in the tool itself, or it may switch them off again.

Fix 6: Reset the Windows Update cache

Microsoft’s own advanced fix is to rename the folders where Windows Update keeps its downloads and signature data. Windows recreates them. In an administrator Command Prompt, run these lines one at a time:

net stop wuauserv
net stop bits
net stop cryptsvc
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old
net start cryptsvc
net start bits
net start wuauserv

If a ren line says access is denied, a service is still running: run the matching net stop line again and retry. Your update history list may look empty afterwards, but installed updates aren’t removed. You can also check for and install updates from the command line once the cache is reset.

Fix 7: Repair Windows files

If Windows Update still can’t connect, repair system files in an administrator Command Prompt:

DISM /Online /Cleanup-Image /RestoreHealth
sfc /scannow

If SFC can’t finish, see Windows Resource Protection could not perform the requested operation. As a last resort, an in-place upgrade with the Windows 11 or Windows 10 installation media repairs Windows Update while keeping your files and apps.

Once updates connect again, other errors can appear during installation. See error 0x8007001f or “Getting Windows ready” stuck if that happens.

Related guides

• How to run Windows Update from the command line
• Windows Update error 0x8007001f: how to fix it
• “Getting Windows ready, don’t turn off your computer” stuck: how to fix it
• Windows Resource Protection could not perform the requested operation (SFC and DISM)
• svchost.exe (netsvcs): what it is and how to fix high CPU or network use

Official sources: for more detail, see Microsoft’s own documentation:

• Microsoft Support: Troubleshoot problems updating Windows

Frequently asked questions

Is Windows Update down?

Rarely, and usually only briefly. If the error appears on several PCs on different networks at the same time, wait a few hours and try again. If it only affects one PC, the cause is on that PC or its network.

Can I update Windows without Windows Update?

Yes. You can download individual updates from the Microsoft Update Catalog, or install the latest feature version with Microsoft’s installation assistant or installation media. Fixing Windows Update is still worthwhile, since it delivers security updates automatically.

Does a metered connection cause this error?

A metered connection usually pauses large downloads rather than showing this message, but turning it off under the network’s properties in Settings > Network & internet is a quick test.

Will resetting the update cache delete my files?

No. It only renames Windows Update’s download and signature folders. Your files, apps and installed updates stay as they are.