Introduction
Office activation error 0x80070005 is an Access Denied error that prevents Microsoft 365 or Office 2021/2024 from completing the activation process. When this error occurs, Office applications launch in reduced functionality mode, displaying "Product Activation Failed" or "We couldn't activate Microsoft 365" banners and blocking editing features. This error typically appears after a Windows update, a user account change, or a security software update that modifies critical permissions.
The error code 0x80070005 translates to "Access is denied." In the context of Office activation, this means that the Office licensing system — specifically the Software Licensing Service and the Office Identity service — cannot write to or read from protected registry keys, files, or folders. The fix depends on exactly which resource is being denied, which is why a single solution does not work for everyone.
This guide covers 12 proven methods to resolve Office activation error 0x80070005, organized from quick fixes to advanced registry and PowerShell solutions.
Problem Description
When you launch an Office application after installation or after a Windows update, you see an activation prompt. Upon entering your credentials, the activation process begins but fails with error 0x80070005. Alternatively, Office may silently enter reduced functionality mode without displaying the error code.
The activation process requires:
- Write access to the HKEY_USERS\S-1-5-20 registry hive
- Read/write access to licensing files in C:\Windows\System32\spp\store\2.0
- The Software Licensing Service (sppsvc) running correctly
- The Microsoft Office Click-to-Run Service working properly
- A valid authentication token from Microsoft servers
- Unblocked communication with activation endpoints
When any of these conditions are not met, the activation fails with 0x80070005.
Symptoms
- "We're sorry, something went wrong and we can't do this for you right now. (0x80070005)" message
- Office products show "Product Activation Failed" in the title bar
- "Access Denied" error during activation
- Office works in read-only mode with editing disabled
- Banners urging activation appear persistently
- Office activation succeeds on one user account but fails on another
- Error occurs immediately after entering Microsoft 365 credentials
- Event Viewer shows Licensing-Service errors with code 0x80070005
- Office deactivates after a Windows Update and cannot reactivate
Root Cause
Error 0x80070005 during Office activation can be traced to several root causes:
1. Insufficient registry permissions: The HKEY_USERS\S-1-5-20 (NETWORK SERVICE) registry hive lacks the necessary permissions for the current user or the NETWORK SERVICE account.
2. Corrupted Office identity tokens: The local authentication tokens cached by Office become corrupted or expire incorrectly.
3. Blocked BrokerPlugin process: Antivirus, firewall, or proxy software blocks the Microsoft AAD BrokerPlugin process, preventing authentication.
4. Corrupted tokens.dat file: The Software Licensing token file in C:\Windows\System32\spp\store\2.0 becomes corrupted.
5. Stale Office credentials: Outdated or incorrect credentials stored in Windows Credential Manager interfere with the activation process.
6. Controlled Folder Access blocking: Windows Defender Controlled Folder Access blocks Office licensing files from being modified.
7. Faulty Click-to-Run service: The Microsoft Office Click-to-Run Service is stopped, disabled, or malfunctioning.
8. Work or school account conflicts: Multiple or stale work/school accounts interfere with the licensing system.
Troubleshooting Steps
Step 1: Sign Out and Sign Back In
Before any advanced troubleshooting, refresh the activation state by signing out and back in. Open any Office app, go to File > Account, click Sign Out, close all Office apps, reopen Word, and sign back in. This refreshes the local identity tokens and resolves a significant portion of identity-related 0x80070005 errors.
Step 2: Run Office as Administrator
Running Office with elevated privileges bypasses permission restrictions that may block activation. Close all Office applications, right-click the Start button, select Run, type winword.exe, and press Enter. In Word, go to File > Account and try activating.
Step 3: Run the Microsoft 365 Activation Troubleshooter
Microsoft provides an automated tool for activation issues. Download the Microsoft Support and Recovery Assistant (SaRA) from https://aka.ms/SaRA, install it, select "Microsoft 365 > I need help with activation," and follow the prompts.
Step 4: Remove Stale Office Credentials from Credential Manager
Open Control Panel > Credential Manager > Windows Credentials. Look for any credentials containing MicrosoftOffice16, MicrosoftOffice, or Microsoft.AAD. Click the arrow next to each and select Remove. Close Credential Manager and restart your computer.
Step 5: Repair Office Installation
A corrupted Office installation can trigger activation failures. Go to Settings > Apps > Installed apps, find Microsoft 365, click Modify, and select Quick Repair first. If that does not resolve the issue, run Online Repair.
Step 6: Fix Registry Permissions for NETWORK SERVICE
This is one of the most effective fixes for error 0x80070005 that occurs after a Windows update.
1. Press Windows key + R, type regedit, and press Enter.
2. Navigate to HKEY_USERS and locate S-1-5-20 (NETWORK SERVICE).
3. Right-click S-1-5-20 > Permissions > Add your Windows username with Full Control.
4. Select NETWORK SERVICE in the list > Advanced > Edit > select Full Control.
5. Check "Replace all child object permission entries with inheritable permission entries from this object."
6. Click OK through all dialog boxes, close Registry Editor, and restart your computer.
Step 7: Delete the AAD BrokerPlugin Token Files
Close all Office applications. Open File Explorer and navigate to %LOCALAPPDATA%\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AC\TokenBroker\Accounts and %LOCALAPPDATA%\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AC\TokenBroker\Accounts. Delete all files and folders in both locations, then restart your computer.
Step 8: Rename the tokens.dat File
The tokens.dat file contains Software Licensing state data. Open an elevated Command Prompt and run "net stop sppsvc." Navigate to C:\Windows\System32\spp\store\2.0, rename tokens.dat to tokens.old, then run "net start sppsvc." Perform an Online Repair of Office and restart.
Step 9: Disable Controlled Folder Access Temporarily
Go to Settings > Privacy & security > Windows Security > Virus & threat protection > Manage ransomware protection. Toggle Controlled folder access to Off temporarily, try activating Office, then re-enable it.
Step 10: Remove Stale Work or School Accounts
Open Settings > Accounts > Access work or school. Select any account that appears stale or unused, click Disconnect, and confirm. Restart your computer and try activating again.
Step 11: Restart the Microsoft Office Click-to-Run Service
Press Windows key + R, type services.msc, and press Enter. Scroll to Microsoft Office Click-to-Run Service, right-click and select Restart. Set Startup type to Automatic if not already. Restart your computer.
Step 12: Use PowerShell to Reset Office Activation State
For enterprise IT administrators, PowerShell provides a scriptable approach. Run PowerShell (Admin) and execute commands to remove Office credentials from Credential Manager, stop Click-to-Run and sppsvc services, clear token cache folders, rename tokens.dat, and restart services.
FAQ
### Q1: What does error 0x80070005 mean for Office activation?
It means Access Denied. The Office licensing system cannot access the files or registry keys it needs to complete activation.
### Q2: Will I lose my Office data if I repair Office?
No. Quick Repair and Online Repair preserve your documents, templates, and settings. Only corrupted program files are replaced.
### Q3: How do I know if my registry permissions are causing the error?
Check Event Viewer for Licensing-Service errors with 0x80070005. Try running Office as administrator — if activation succeeds, permissions are the likely cause.
### Q4: Can antivirus software cause activation error 0x80070005?
Yes. Antivirus software can block the AAD BrokerPlugin process and licensing file access. Temporarily disable antivirus to test.
### Q5: How long does a tokens.dat regeneration take?
The tokens.old file is created instantly. The new tokens.dat file is generated when you launch an Office app and trigger activation.
### Q6: What is the S-1-5-20 registry key?
It represents the NETWORK SERVICE account. Office licensing uses this account to validate and store activation state.
### Q7: Do I need admin rights to fix 0x80070005?
Yes. All fixes require administrative privileges. Contact your IT department if you do not have admin access.
### Q8: Will uninstalling and reinstalling Office fix this error?
In most cases, yes. However, the registry and token fixes should be tried first as they are faster and preserve all settings.
### Q9: Why does 0x80070005 appear after a Windows Update?
Windows Updates can modify registry permissions, reset the S-1-5-20 ACLs, or change service configurations, breaking Office activation.
### Q10: Can I activate Office by phone instead?
Yes. Microsoft provides a phone activation option. The activation phone number varies by region and is shown during the activation process.
### Q11: What is the Microsoft AAD BrokerPlugin?
It is a system component that handles modern authentication for Microsoft 365. When blocked or corrupted, it prevents activation.
### Q12: How do I verify Office is successfully activated?
Open any Office app, go to File > Account. The subscription or product information should show "Active" or "Activated."
Related Articles
- How to Repair Microsoft Office in Windows 11 (Complete Guide)
- Fix Microsoft 365 Sign-In Issues in Windows 11
- Windows Software Licensing Service Troubleshooting Guide
- How to Remove Stale Office Credentials from Windows 11
- Microsoft 365 Activation Status Check and Troubleshooting
Conclusion
Office activation error 0x80070005 is an Access Denied error caused by permission issues in the registry, corrupted licensing tokens, or blocked authentication processes. The most effective fix is restoring permissions on the HKEY_USERS\S-1-5-20 registry key, followed by removing stale credentials and clearing the AAD BrokerPlugin cache.
For most users, starting with Steps 1-3 (sign out/in, run as admin, SaRA troubleshooter) will resolve the issue. For persistent cases, the registry permission fix (Step 6) and tokens.dat renaming (Step 8) provide the highest success rate. Enterprise administrators can use the PowerShell automation script in Step 12 to efficiently reset activation state across multiple workstations.
If you have tried all methods and activation still fails, the issue may be on the Microsoft tenant side — verify license assignment in the Microsoft 365 admin console and check conditional access policies.
For additional Office troubleshooting guides and IT support tools, visit BUSINESSROSHIYA.