System File Checker (SFC) scans fail when Windows Resource Protection cannot start its repair service, blocking critical repairs and leaving system files unchecked. This issue is often caused by the Windows Modules Installer (TrustedInstaller) service being disabled or misconfigured, preventing SFC from accessing the components it needs to operate.

Enable the Windows Modules Installer Service

Step 1: Press Windows + R to open the Run dialog. Type services.msc and press Enter to open the Services window.

Step 2: Scroll through the list and locate Windows Modules Installer. Double-click it to open its properties.

Step 3: Set the Startup type to Manual or Automatic using the dropdown menu. If the service status is Stopped, click Start to run it.

Step 4: Click Apply and then OK to confirm the changes. Close the Services window.

Step 5: Open Command Prompt as administrator and run the System File Checker again with sfc /scannow.


Start TrustedInstaller Using Command Prompt

Step 1: Open Command Prompt with administrative privileges. You can do this by searching for cmd in the Start menu, right-clicking Command Prompt, and selecting Run as administrator.

Step 2: Enter the following command to start the TrustedInstaller service:

net start trustedinstaller

Step 3: Wait for the confirmation message indicating the service has started. Then, run sfc /scannow again to check if the error is resolved.


Check Service Permissions in the Registry

Step 1: Press Windows + R, type regedit, and press Enter to open the Registry Editor. If prompted, allow the app to make changes.

Step 2: Navigate to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrustedInstaller

Step 3: Make sure the Start value is set to 2 (Manual). If it’s set to 4 (Disabled), double-click the Start entry and change its value data to 2.

Step 4: Close the Registry Editor and restart your computer. Then, attempt to run SFC again.


Run SFC in Safe Mode

Step 1: Open the Start menu, click the power icon, hold Shift, and select Restart to access the Windows Recovery Environment.

Step 2: Choose Troubleshoot > Advanced options > Startup Settings and click Restart.

Step 3: After your PC restarts, press the number corresponding to Safe Mode with Command Prompt.

Step 4: Once in Safe Mode, open Command Prompt as administrator and run sfc /scannow.


Addressing the TrustedInstaller service status and permissions typically resolves this SFC error, restoring your ability to repair system files efficiently. Keep the Windows Modules Installer set to Manual or Automatic to prevent future interruptions with system repairs.