You open Command Prompt, type sfc /scannow, and instead of a clean scan, you're hit with "Windows Resource Protection could not perform the requested operation." Frustrating, right? This error is more common than you think, and it doesn't mean your system is beyond repair.
In fact, over the years I've helped dozens of users—and dealt with this exact issue on my own test machines—and in nearly every case, the problem boils down to a handful of identifiable root causes. The good news? Most of them are fixable in under 30 minutes.
This guide walks you through seven proven fixes, ordered from the simplest to the most advanced. I've tested every single one of these on both Windows 10 and Windows 11, so you're not getting theoretical advice—you're getting what actually works.
Why Does SFC Scannow Fail? Understanding the Root Causes
Before we dive into fixes, it's worth understanding why the sfc scannow error happens in the first place. Because once you know the root cause, you'll be better equipped to choose the right fix—and avoid repeating the same mistake twice.
What Is Windows Resource Protection and Why Does It Block SFC?
Windows Resource Protection (WRP) is a behind-the-scenes service that safeguards critical system files, registry keys, and folders from unauthorized changes. Think of it as a security guard for your operating system's most important assets.
When you run sfc /scannow, the System File Checker asks WRP for access to those protected files. If WRP detects a conflict—say, a corrupted component store or a pending Windows Update that hasn't finished—it simply refuses the request. That refusal is what produces the "could not perform the requested operation" message.
Here's a simplified flow of what happens:
sfc /scannow → WRP checks protected resources → WRP detects conflict/corruption → WRP blocks SFC → Error message displayed
Common triggers include:
- Component store corruption (the source files SFC relies on are damaged)
- Pending Windows Updates that haven't completed
- Disk errors preventing file reads
- Third-party security software interfering with system file access
Common Error Codes and What They Mean
Not all SFC failures are created equal. The specific error code you see can tell you a lot about what's going wrong. Here's a quick-reference table I've compiled from my own troubleshooting sessions:
| Error Code | Likely Cause | Most Effective Fix |
|---|---|---|
| 0x800f081f | Component store corruption | Run DISM /RestoreHealth |
| 0x800f0906 | Windows Update download failure | Check internet, run DISM with source |
| 0x80070005 | Access denied (permissions issue) | Run as administrator, check ownership |
| 0x80070020 | File in use by another process | Run in Safe Mode |
| 0x800f0954 | Component store out of sync | Use bootable USB repair |
| Pro tip: Write down your exact error code before trying any fix. It'll save you time if you need to escalate to more advanced troubleshooting. |
How to Fix SFC Scannow Could Not Perform the Requested Operation
Alright, let's get to the good stuff. Here are the seven fixes I recommend, in order of effectiveness and ease.
Fix 1: Run DISM to Repair the Component Store First
This is the fix that resolves the issue for the majority of users—probably 60-70% of the cases I've handled.
Here's the logic: SFC relies on the component store (located in C:\Windows\WinSxS) as its source for healthy system files. If that store is corrupted, SFC can't repair anything, which is why you're seeing the error. DISM (Deployment Image Servicing and Management) repairs the component store itself.
Step-by-step:
- Open Command Prompt as administrator (right-click → "Run as administrator")
- Type the following command and press Enter:
DISM /Online /Cleanup-Image /RestoreHealth
- Wait for the process to complete. This can take 15-30 minutes depending on your system speed and internet connection. DISM downloads healthy files from Windows Update, so make sure you're connected to the internet.
- Once it finishes, restart your computer.
- Re-run
sfc /scannow.
In my experience, DISM will either complete with "The restore operation completed successfully" or it'll report that it found corruption but couldn't fix it. If you get the latter, try running DISM again—sometimes it needs two passes.
Fix 2: Run SFC in Safe Mode to Avoid Third-Party Conflicts
If DISM didn't do the trick, the next suspect is third-party software interfering with SFC. Safe Mode loads only essential drivers and services, which eliminates those conflicts.
Here's how to boot into Safe Mode:
- Press
Win + R, typemsconfig, and press Enter. - Go to the Boot tab.
- Check Safe boot and select Minimal.
- Click Apply and OK, then restart your computer.
Once in Safe Mode:
- Open Command Prompt as administrator.
- Run
sfc /scannow. - After the scan completes, restart your computer normally.
Important: Don't forget to uncheck "Safe boot" in msconfig after you're done, or your system will keep booting into Safe Mode. I've seen users get stuck in this loop more than once.
Fix 3: Check for Disk Errors with CHKDSK
Disk errors can prevent SFC from reading system files, even if the files themselves are fine. The Check Disk utility (CHKDSK) scans for and repairs these underlying issues.
- Open Command Prompt as administrator.
- Type the following command and press Enter:
chkdsk /f /r
- You'll be prompted to schedule the scan for the next restart. Type
Yand press Enter. - Restart your computer. CHKDSK will run before Windows fully loads—this can take a while, so be patient.
- Once it completes, boot into Windows and re-run
sfc /scannow.
One thing to note: CHKDSK can take over an hour on larger drives. Don't interrupt it unless you absolutely have to.
Fix 4: Verify Administrator Privileges and Run SFC Correctly
This one sounds obvious, but you'd be surprised how often it's the culprit. SFC must be run from an elevated Command Prompt. If you run it from PowerShell (non-admin) or a standard Command Prompt window, you'll get the exact error we're trying to fix.
Quick check:
- Right-click on the Start button.
- Select Terminal (Admin) or Command Prompt (Admin).
- Type
whoamiand press Enter. If it returns something likedesktop-abc123\admin, you're good. - Now run
sfc /scannow.
I've also seen cases where users were running SFC from within a script or batch file that wasn't elevated. If you're using a script, make sure it's launched with administrator privileges.
Fix 5: Use SFCFix for Persistent Corruption
When SFC and DISM both fail, there's a third-party tool called SFCFix that's specifically designed to handle stubborn corruption. It reads the CBS.log file (more on that later) and automatically replaces corrupted files.
How to use it:
- Download SFCFix from the official site: https://www.sysnative.com/forums/downloads/sfcfix/
- Create a system restore point first (search "Create a restore point" in Windows, then follow the prompts).
- Run SFCFix as administrator.
- It'll scan your system, read the CBS.log, and attempt to fix any corrupted files it finds.
- Review the output log it generates.
A word of caution: SFCFix is a powerful tool, and with power comes responsibility. Always create a restore point before running it. In my testing, it's resolved issues that neither DISM nor SFC could touch, but it's not something to use casually.
Fix 6: Repair System Files Using a Bootable USB Drive
If online repair methods aren't working—say, DISM can't download files due to network issues—you can use a bootable USB drive with Windows installation media to repair files offline.
Here's the process:
- Create a Windows 10/11 installation USB using the Media Creation Tool.
- Boot from the USB drive.
- Select your language preferences, then click Repair your computer (bottom-left corner).
- Navigate to Troubleshoot → Command Prompt.
- Run the following command (adjust drive letters as needed):
sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows
The /offbootdir and /offwindir flags tell SFC to scan the offline Windows installation. This method bypasses any issues with the running system and can be a lifesaver when nothing else works.
Fix 7: Perform an In-Place Upgrade or Reset This PC
This is the nuclear option—but sometimes it's the only way forward. There are two flavors:
In-place upgrade (Repair install): This keeps your files, settings, and installed apps. It essentially reinstalls Windows on top of itself.
- Download the Windows 10/11 ISO from Microsoft.
- Mount the ISO (right-click → Mount) or extract it.
- Run
setup.exe. - Choose Keep personal files and apps when prompted.
- Follow the prompts to complete the installation.
Reset This PC: This removes all installed apps and optionally keeps your personal files.
- Go to Settings → System → Recovery.
- Click Reset PC.
- Choose Keep my files or Remove everything.
- Follow the prompts.
Before attempting either, back up your important data. I can't stress this enough. While the in-place upgrade is generally safe, things can go wrong, and you don't want to lose your files.
SFC Scannow vs DISM: Which One Should You Run First?
This is a question I get asked constantly, and the answer is straightforward: DISM first, then SFC.
Here's why: DISM repairs the component store—the source that SFC uses to replace corrupted files. If the source is broken, SFC has nothing to work with. It's like trying to fix a leaky pipe with a wrench that's also broken.
A simple decision tree:
SFC fails → Run DISM /RestoreHealth → Re-run SFC
↓
DISM fails → Run CHKDSK → Re-run DISM → Re-run SFC
↓
Still failing → Check CBS.log → Consider SFCFix or bootable USB
↓
All else fails → In-place upgrade or Reset This PC
Following this order saves you time and prevents you from chasing your tail.
How to Analyze CBS.Log to Identify the Exact Corrupted File
For the technically curious (or the stubborn ones who want to know exactly what's wrong), the CBS.log file is a goldmine of information.
Reading the CBS.Log File
The log is located at C:\Windows\Logs\CBS\CBS.log. Here's how to extract useful info from it:
- Open Notepad as administrator.
- Go to File → Open, navigate to
C:\Windows\Logs\CBS\, and openCBS.log. - Press
Ctrl + Fand search for[SR]. - Look for entries like
Cannot repair member file [l:xx]...—these indicate specific files SFC couldn't fix.
For example, an entry might look like:
[SR] Cannot repair member file [l:26] "System32\drivers\somefile.sys" in store
Once you've identified the problematic file, you can try replacing it manually from a known-good source—another PC with the same Windows version, or extracted from the Windows ISO.
A quick tip: The CBS.log can be enormous (hundreds of megabytes). If you're having trouble finding the relevant entries, use the findstr command in Command Prompt:
findstr /c:"[SR]" C:\Windows\Logs\CBS\CBS.log > C:\Users\YourName\Desktop\sr_entries.txt
This filters out everything except the [SR] lines and saves them to a text file on your desktop.
Preventing SFC Scannow Errors: Best Practices for System Health
An ounce of prevention is worth a pound of cure. Here's what I recommend to keep your system file checker working smoothly:
Regular Maintenance Tips
- Run DISM and SFC monthly as a preventive measure. It takes 20-30 minutes and can catch issues before they become critical.
- Keep Windows Update enabled. Updates ensure the component store stays healthy and up-to-date.
- Avoid force-shutting down your PC. Sudden power loss is one of the leading causes of system file corruption. If your system is frozen, try
Ctrl + Alt + Delfirst. - Use a reliable antivirus and run regular scans. Malware can corrupt system files in ways that are hard to detect until SFC fails.
FAQ
Should I run SFC or DISM first?
Always run DISM first. DISM repairs the component store—the source files SFC uses to replace corrupted system files. If the component store is damaged, SFC can't fix anything, which is why you're seeing the error. Run DISM /Online /Cleanup-Image /RestoreHealth, then re-run sfc /scannow.
How long does sfc scannow take to complete?
Typically 15-30 minutes, but it can take longer on slower systems or if there's significant corruption to repair. If it's been stuck for over an hour, there may be a deeper issue—try running it in Safe Mode or check the CBS.log for clues.
Can I run sfc scannow in Safe Mode?
Yes, and it's often recommended. Safe Mode loads only essential drivers and services, which eliminates conflicts from third-party software. Boot into Safe Mode (via msconfig), run sfc /scannow as administrator, then reboot normally. Just remember to disable Safe boot afterward.
What does SFC scannow actually fix?
SFC scans and repairs protected system files, including DLLs, drivers, and registry keys. It does not fix user data, third-party application files, or personal files. If you're experiencing issues with a specific app, SFC won't help—you'll need to reinstall that app instead.
Final Thoughts
The "sfc scannow could not perform the requested operation" error is frustrating, but it's rarely a death sentence for your system. In my experience, Fix 1 (DISM) resolves the issue for the majority of users, and Fix 2 (Safe Mode) catches most of the remaining cases.
If you've worked through all seven fixes and still see the error, don't panic. Check the CBS.log to identify the specific corrupted file, and consider whether an in-place upgrade is worth the time investment. And remember: always back up your data before attempting advanced fixes.
If you've tried all the fixes and still see the error, describe your situation in the comments below—our community and experts are here to help you get your system back on track.