access denied for windows server 2025

[octavmarius]

i get this error only for remote computers with windows server 2025.
for any other operating system version it works just fain (2022, 2019, 2016).

Get-WindowsUpdate -ComputerName computername
Get-WindowsUpdate : Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
At line:1 char:1
+ Get-WindowsUpdate -ComputerName computername
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-WindowsUpdate], UnauthorizedAccessException
    + FullyQualifiedErrorId : System.UnauthorizedAccessException,PSWindowsUpdate.GetWindowsUpdate

for the same computers (with windows server 2025) other remote powershell command works ok. so it's not related with user permissions (i use a domain admin account), firewall permissions, powershell remoting....

is this happend only for me ?

thanks for looking into this.

[octavmarius]

PS> $Error[0] | format-list * -Force


PSMessageDetails      :
Exception             : System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
                           at WUApiLib.IUpdateSession3.CreateUpdateSearcher()
                           at PSWindowsUpdate.GetWindowsUpdate.CoreProcessing()
                           at PSWindowsUpdate.GetWindowsUpdate.ProcessRecord()
                           at System.Management.Automation.CommandProcessor.ProcessRecord()
TargetObject          :
CategoryInfo          : NotSpecified: (:) [Get-WindowsUpdate], UnauthorizedAccessException
FullyQualifiedErrorId : System.UnauthorizedAccessException,PSWindowsUpdate.GetWindowsUpdate
ErrorDetails          :
InvocationInfo        : System.Management.Automation.InvocationInfo
ScriptStackTrace      : at <ScriptBlock>, <No file>: line 1
PipelineIterationInfo : {}

[nikkiparker]

Experiencing the same issue.

Since October CU 2025 updates, also unable to remotely run any commands from the PSWindowsUpdate module for Windows Server 2025. Our script, which uses the Invoke-WUJob to remotely install updates across our server estate is now failing on Windows 2025 servers but working successfully on 2016, 2019, 2022. In fact, none of the PSWindowsUpdate commands are working and give the same Access denied error.

[misejoh]

Same issue here, since installing these two patches (on Windows Server 2025), it no longer works:

KB5066131 (71MB) 2025-10 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft se ...
KB5068861 (12GB) 2025-11 Cumulative Update for Microsoft server operating system version 24H ...

(Edit: I tried uninstalling KB5066131 and the issue still persists, so the culprit appears to be KB5068861)

Same error that @octavmarius , Ps Module version: 2.2.1.5

I have already run Reset-WUComponents, rebooted the system, and executed Enable-WURemoting. None of these steps have resolved the issue so far.

I am unable to remotely call Get-WUList, either using Get-WUList -ComputerName XXX or Invoke-Command XXX { Get-WUList }. However, running it locally works without errors, using the same administrative credentials.

Please let us know if there is any additional feedback or diagnostics we can provide.

[scampbell123]

Phew, glad I'm not the only one. Been beating my head against this. I confirm that it's only happening through WinRM sessions (http and https). I run the module remotely on Win2019 and Win2022 servers without issue. I'll help troubleshoot/test if need be.

[scampbell123]

Further testing: Disabling UAC, as well as making sure the registry key LocalAccountTokenFilterPolicy (https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/user-account-control-and-remote-restriction) is set does not fix the issue either on the remote side.

Also tried enabling CredSSP on the remote slide, also did not work.

[mareksedlacek2-arch]

We have same problem only on All Windows Servers 2025

PS C:\SCRIPTS> Enter-PSSession -ComputerName xxxxxxxxxxx
[xxxxxxxxxxx]: PS C:\Users\SrvAdm0041\Documents> Get-WindowsUpdate
Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
+ CategoryInfo : NotSpecified: (:) [Get-WindowsUpdate], UnauthorizedAccessException
+ FullyQualifiedErrorId : System.UnauthorizedAccessException,PSWindowsUpdate.GetWindowsUpdate

[MAP-admin-one]

Happening for me on Win 11 25h2 machines now...

[mareksedlacek2-arch]

Server 2025 was resolved with January Update :-)