Early Access  -  Black Friday Bundle  -  80% Off Buy now
Windows Errors

How to Repair System Files Using System File Checker (SFC)

Run DISM and sfc /scannow in the right order, read the result, and know what to do if SFC can't fix a file.

By Chris, WinZip Team|Published |Updated

Keep your PC running smoothly. WinZip System Utilities Suite cleans junk files, updates drivers and manages the apps that start with Windows.

Download Now For Windows 11 and 10
A magnifying glass scanning system files on a laptop and replacing a damaged one

Quick Answer

To repair Windows system files with System File Checker:

  1. Search for cmd, right-click Command Prompt and select Run as administrator.
  2. Run DISM.exe /Online /Cleanup-image /Restorehealth and wait for it to finish (this can take several minutes).
  3. Run sfc /scannow and leave the window open until the scan reaches 100%.
  4. Read the result message and follow the matching step below: no violations means you're done, and "could not perform" means run it again in safe mode.

How you know it worked: running sfc /scannow again reports that Windows Resource Protection did not find any integrity violations.

System File Checker (SFC) is a tool built into Windows that scans all protected system files and replaces damaged or incorrect versions with correct ones. Microsoft notes that when critical system files are missing or damaged, Windows may begin to malfunction, for example with features that stop working, system errors or freezes. Microsoft now says to run a second built-in tool, DISM, before SFC. The steps are the same in Windows 11 and Windows 10.

1. Open Command Prompt as Administrator

Back to guide

Both tools need administrator rights, so you must be signed in with an account in the Administrators group.

  1. Select Start and type cmd.
  2. Right-click Command Prompt in the results and select Run as administrator.
  3. Select Yes if Windows asks for permission.

Expected result: a Command Prompt window opens with Administrator in its title bar.

2. Run DISM First

Back to guide

DISM (Deployment Image Servicing and Management) runs a more extensive check than SFC and can repair problems in the Windows component store. It gets replacement files from Windows Update, so stay connected to the internet.

  1. Type this command and press Enter:
    DISM.exe /Online /Cleanup-image /Restorehealth
  2. Wait for it to finish. Microsoft says this can take several minutes.

If Windows Update itself is broken, DISM can use another repair source, such as Windows installation media, with the /Source option. For example: DISM.exe /Online /Cleanup-Image /RestoreHealth /Source:C:\RepairSource\Windows /LimitAccess, replacing the path with your own source. /LimitAccess stops DISM from also using Windows Update.

Expected result: DISM reports that the operation completed successfully.

3. Run SFC /scannow

Back to guide

  1. In the same window, type this command and press Enter:
    sfc /scannow
  2. Leave the window open until the verification reaches 100%. SFC replaces any damaged files it finds with a cached copy.

Expected result: SFC finishes and shows one of the messages in the next section.

4. What the SFC Result Means

Back to guide

  • "Windows Resource Protection did not find any integrity violations." Your system files aren't missing or damaged. Nothing more to do here.
  • "Windows Resource Protection found corrupt files and successfully repaired them." Microsoft says the operation was successful. See section 5 if you want the details.
  • "Windows Resource Protection found corrupt files but was unable to fix some of them." Use the log in section 5 to find which files, then try section 7.
  • "Windows Resource Protection could not perform the requested operation." Run SFC again in safe mode (section 6).

5. See Which Files SFC Repaired

Back to guide

SFC writes its details to the CBS.log file in %windir%\Logs\CBS. To copy just the SFC entries to a text file on your desktop, run this in an administrator Command Prompt:

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

Open sfcdetails.txt from your desktop. It includes every SFC run on the PC, so check the dates and times to find your latest scan and any files it couldn't repair.

Expected result: you have a list of the files SFC repaired or couldn't repair.

6. Run SFC in Safe Mode If It Can't Complete

Back to guide

If SFC says it could not perform the requested operation, start Windows in safe mode, which loads only the minimum drivers and services, and run it again.

  1. Select Start > Settings > System > Recovery, and next to Advanced startup select Restart now. On Windows 10, it's Settings > Update & Security > Recovery.
  2. Select Troubleshoot > Advanced options > Startup Settings > Restart.
  3. When the list appears, press 4 or F4 to start in safe mode.
  4. Open Command Prompt as administrator and run sfc /scannow again.

Microsoft also suggests checking that the PendingDeletes and PendingRenames folders exist under %WinDir%\WinSxS\Temp.

Expected result: SFC completes and shows one of the other three messages.

7. Replace a File SFC Can't Fix

Back to guide

This is for experienced users. You need a known good copy of the same file, ideally from another PC running the same version of Windows. In an administrator Command Prompt:

  1. Take ownership of the damaged file: takeown /f <path and file name>
  2. Give administrators full access to it: icacls <path and file name> /grant administrators:F
  3. Copy the good file over it: copy <source file> <destination>

Expected result: running sfc /scannow again no longer lists that file.

Still Not Working? What to Try Next

Back to guide

  • Check without repairing: sfc /verifyonly scans all protected files without changing anything, which is handy for a second opinion.
  • Check the Windows image: Dism /Online /Cleanup-Image /ScanHealth scans for damage, and Dism /Online /Cleanup-Image /CheckHealth reports whether the image is healthy, repairable or non-repairable.
  • Check the drive: chkdsk C: /f finds and fixes file system errors. Because Windows is using drive C, it offers to run at the next restart.
  • Use a recovery option: if files still can't be repaired, Microsoft says you may need to reinstall Windows and points to its recovery options, such as a system restore point or Reset this PC.

Frequently Asked Questions

Should I run DISM or SFC first?

DISM. Microsoft says you should run DISM.exe /Online /Cleanup-image /Restorehealth before sfc /scannow. DISM runs a more extensive check that can repair problems in the Windows component store.

How long does sfc /scannow take?

It varies by PC. Keep the window open until the verification reaches 100%. Microsoft says the DISM step before it can take several minutes.

Where is the SFC log file?

SFC records its details in %windir%\Logs\CBS\CBS.log. Run findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt" to copy just the SFC entries to your desktop.

What if SFC says "Windows Resource Protection could not perform the requested operation"?

Start Windows in safe mode and run sfc /scannow again. Microsoft also suggests checking that the PendingDeletes and PendingRenames folders exist under %WinDir%\WinSxS\Temp.

Can I scan without SFC changing anything?

Yes. sfc /verifyonly checks all protected system files without repairing them, and sfc /verifyfile= followed by a full path checks a single file.

Does SFC delete my personal files?

No. SFC works only on protected Windows system files: it scans them and replaces incorrect versions with correct ones. Your documents, photos and other personal files aren't part of that scan.

How This Guide Was Checked

Written by
Chris, WinZip Team. Updated by the WinZip Team in November 2026.
First published
January 28, 2019
Sources reviewed

Speed Up Your PC With WinZip System Utilities Suite

  • Clean junk files and free up disk space
  • Update outdated drivers
  • Speed up startup
  • Optimize and defrag your drives
Download Now For Windows 11 and 10