Recently I reset a laptop with OEM Windows 10 Home for a friend. All I did was use the built-in Win 10 “factory reset” that should have wiped everything, reinstalled Win 10, and then reactivated just fine.
Alas, that’s not what happened…
Instead, I got error code 0xc0000022, and the perfectly valid built-in OEM key would not re-activate the same Windows on the same hardware – no matter what I did.
It turns out the culprit was an ‘access denied‘ error in the Software Protection service…
Don’t Ask Me…
Now, don’t ask me WHY a perfectly clean, fresh install of Windows 10 Home would have a failed core Windows service.
The error 0xc0000022 means that the Software Protection Service (SPS) wouldn’t start.
If you’re having a similar activation error – especially with resetting an OEM version of Win 10 on your puter – then the first thing to do is verify that the SPS is the culprit.
Check the SPS
First, click Start (the windows logo button on the taskbar).
Click the Services app icon.
Next, scroll down and find Software Protection, and double-click it to view the settings:
If you see this:
What is SPS?
The Software Protection service is a Windows component that verifies the authenticity of software you try to install. It also checks and activates your copy of Windows. Aha!
If the SPS can’t run, you will get an error message saying that you can’t activate Windows – but there’s absolutely nothing wrong with your product key!
Before you go calling Microsoft and swearing a lot, try this:
Fix it Good!
First, open (file) Explorer, click the View tab, and check the Hidden items checkbox in order to see all the files/folders on your puter.
Then, navigate to:
You may have to confirm your admin access to several of these folders. You should then see this:
Right-click in the blank space, choose New -> Folder, and call the new folder: SoftwareProtectionPlatform
Next, click Start, type command, and run Command Prompt as an administrator.
Paste this command in and press the Enter key to run it:
icacls %windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform /grant "BUILTIN\Administrators:(OI)(CI)(F)" "NT AUTHORITY\SYSTEM:(OI)(CI)(F)" "NT Service\sppsvc:(OI)(CI)(R,W,D)" "NETWORK SERVICE:(OI)(CI)(F)"
Next, click Start and type: regedit
Run the Registry Editor app.
In the left column, navigate to:
Right-click on WPA, and choose Permissions…
Rinse and Repeat
Now repeat the above procedure, but this time instead of WPA, you’re looking for:
Once done assigning new permissions to SoftwareProtectionPlatform this time, close the Registry Editor and Explorer.
Back in Services, try once again to Start the Software Protection Service as described in the beginning of this article…
You should find that it starts now. WOOHOO!
Go back and try to Activate Windows, and it should work just fine!!