How to Fix the Bootrec /Fixboot Access Is Denied Error on Windows

If you’re encountering the “Bootrec /Fixboot Access Is Denied” error on your Windows system, it means the command cannot write to the EFI partition due to permission issues. This is a common problem when repairing boot records, especially after Windows updates, reinstallations, or disk errors. Fixing this error allows you to repair your Windows bootloader and restore access to your system. Before beginning, ensure you have a Windows recovery drive or installation media, as you’ll need to boot into Windows Recovery Environment (WinRE) to perform the steps below.

What You’ll Need

A Windows 10 or Windows 11 installation media or recovery drive (USB or DVD)
Access to a computer to create or download the recovery media if you don’t already have one
Basic familiarity with command prompt and BIOS/UEFI settings (optional but helpful)

Step-by-Step

Create a Windows Recovery Drive or Use Installation Media: If you don’t have one, you can create a recovery drive using another Windows PC. Insert a USB drive (at least 8GB), search for “Create a recovery drive” in Windows, and follow the prompts. Alternatively, download the Windows Media Creation Tool from Microsoft’s official site to prepare installation media.
Boot into Windows Recovery Environment: Insert the recovery drive or installation media into your affected PC. Restart your PC and boot from the media. You might need to change the boot order in BIOS/UEFI settings—usually accessed by pressing F2, F12, Delete, or Esc during startup. Select your USB or DVD as the boot device and press Enter.
Access Command Prompt: Once the Windows Setup screen appears, select your language and preferences, then click “Next.” Click on “Repair your computer” in the lower-left corner. Navigate to Troubleshoot > Advanced options > Command Prompt.
Identify the EFI partition: In Command Prompt, type:
```
diskpart
```
Then, list disks with:
```
list disk
```
Identify your system disk (usually Disk 0). Select it:
```
select disk 0
```
List partitions:
```
list partition
```
Find the EFI partition (typically around 100-300MB, labeled EFI or System). Select it:
```
select partition X
```
Replace X with the partition number. Assign a drive letter:
```
assign letter=Z
```
Exit Diskpart:
```
exit
```
Fix the Boot Record: Now, attempt to run:
```
bootrec /fixboot
```
If you encounter “Access is denied,” proceed to the next step.
Take Ownership of the EFI Partition: In Command Prompt, type:
```
diskpart
```
Then:
```
select disk 0
```
```
select partition X
```
Replace X with your EFI partition number. Run:
```
assign letter=Z
```
```
exit
```
Then, take ownership:
```
takeown /f Z:\ /r /d y
```
And grant full permissions:
```
icacls Z:\ /grant administrators:F /t
```
Re-run the Fixboot Command: After permissions are set, run:
```
bootrec /fixboot
```
This should execute without the “Access is denied” error.
Rebuild the BCD Store: To ensure the boot configuration is correct, run:
```
bootrec /rebuildbcd
```
If prompted to add installations, confirm with “Yes.”
Remove the Drive Letter and Exit: Once done, remove the drive letter assignment:
```
diskpart
```
```
select disk 0
```
```
select partition X
```
```
remove letter=Z
```
```
exit
```
Then restart your PC and remove the recovery media.

Common Mistakes

Forgetting to select the correct disk or partition in Diskpart, leading to accidental data modification or no effect.
Not running Command Prompt with administrator privileges or failing to take ownership of the EFI partition.
Attempting to run commands from the wrong environment, such as Windows instead of WinRE.
Not properly removing the drive letter after fixing the boot records, which can cause boot issues later.
Using outdated or incompatible recovery media that doesn’t match your Windows version.

Tips

Always back up important data before modifying disk partitions or boot records.
If you’re unsure about disk and partition numbers, double-check before executing commands.
Use the latest Windows recovery media to ensure compatibility.
If the EFI partition is missing or corrupted, consider repairing or recreating it using Windows installation tools.
After fixing the error, run a system file check with sfc /scannow once Windows boots normally.

Troubleshooting

If the above steps do not resolve the “Access is denied” error or your system still won’t boot, consider these options:

Verify the EFI Partition: Make sure the EFI partition exists and is properly formatted. If missing, you may need to recreate it using disk management tools.
Check for Disk Errors: Run chkdsk /r /f on your system drive from the recovery environment to fix disk errors that might prevent writing to the EFI partition.
Repair Windows Boot Files: Use the Startup Repair tool from the recovery menu to automatically fix boot issues.
Reinstall Windows: As a last resort, reinstall Windows to restore a clean boot environment, especially if system files are corrupted.

Persistent issues may also indicate hardware problems or BIOS/UEFI misconfigurations. Ensure Secure Boot is disabled if necessary and that the firmware recognizes the disk correctly.

Frequently Asked Questions

1. Why do I get “Access is denied” when running bootrec /Fixboot?

This usually happens because the EFI partition’s permissions are restrictive or the partition is not owned by the current user. Taking ownership and granting permissions typically resolves the issue.

2. Can I fix this error without reinstalling Windows?

Yes, by repairing the EFI partition, fixing permissions, and rebuilding the boot configuration, you can often resolve the error without reinstalling.

3. What if my EFI partition is missing or corrupted?

If missing, you’ll need to recreate the EFI partition. If corrupted, formatting and recreating it, then copying the necessary boot files, is often required.

4. Is it safe to modify disk partitions using Diskpart?

Yes, but only if you are confident you understand the commands. Incorrect use can lead to data loss or system inaccessibility. Always back up data first.

5. What should I do if the commands still don’t work?

Try repairing the disk with chkdsk, resetting BIOS/UEFI settings, or consulting professional support if hardware issues are suspected.

How to Fix the Bootrec /Fixboot Access Is Denied Error on Windows

How to Fix the Bootrec /Fixboot Access Is Denied Error on Windows

What You’ll Need

Step-by-Step

Common Mistakes

Tips

Troubleshooting

Frequently Asked Questions

1. Why do I get “Access is denied” when running bootrec /Fixboot?

2. Can I fix this error without reinstalling Windows?

3. What if my EFI partition is missing or corrupted?

4. Is it safe to modify disk partitions using Diskpart?

5. What should I do if the commands still don’t work?

Related