How to Run SFC Scannow on Windows 11

Run sfc scannow on Windows 11 to repair corrupted system files from Command Prompt, Safe Mode, or Windows Recovery Environment.

T

Technobezz

Senior Editor

Jul 8, 2026
7 min read

Contents

Don't Miss the Good Stuff

Get tech news that matters delivered weekly. Join 50,000+ readers.

Windows can start acting broken when protected system files are missing or corrupted. Apps fail, settings misbehave, or the PC refuses to boot cleanly, and sfc /scannow is the built-in repair command Microsoft documents for those files. Start with the current online repair order, then move to Safe Mode or Windows Recovery Environment if Windows cannot complete the scan normally.

1. Run the Microsoft repair order first

Use this first when Windows still opens. Microsoft’s current online flow repairs the Windows image with DISM before SFC checks protected system files.

  1. 1.Install the latest Windows updates, then restart the PC.
  2. 2.Select the taskbar search box and type command prompt.
  3. 3.Right-click or press and hold Command Prompt.
  4. 4.Select Run as administrator, then select Yes at the User Account Control prompt.
  5. 5.Run DISM.exe /Online /Cleanup-image /Restorehealth.
  6. 6.After The operation completed successfully appears, run sfc /scannow.
  7. 7.After Verification 100% complete appears, type exit and press Enter.

This flow applies to Windows 11. Windows 10 still has SFC, but free Windows 10 support ended on October 14, 2025.

2. Open SFC through Windows Terminal

  1. 1.Press Windows key + X.
  2. 2.Select Terminal (Admin) (labeled Windows Terminal (Admin) on older Windows 11 builds).
  3. 3.Approve the User Account Control prompt.
  4. 4.Run sfc /scannow.

If you prefer Windows Terminal, run the same command from an elevated Terminal window. SFC works from Command Prompt or PowerShell profiles because sfc.exe is a Windows command-line tool. For repeat repairs, open Settings in Windows Terminal, choose the profile or defaults, enable Automatically run as Administrator, then approve elevation when that profile opens.

3. Switch to Safe Mode when SFC stops

Safe Mode is the next place to run the scan when SFC returns Windows Resource Protection could not perform the requested operation.

  1. 1.Access Windows Recovery Environment.
  2. 2.Select Troubleshoot > Advanced options > Startup Settings > Restart.
  3. 3.On the Startup Settings screen, select Enable Safe Mode with the number key or function key.
  4. 4.After Windows starts in Safe Mode, open Command Prompt with Run as administrator.
  5. 5.Run sfc /scannow.

4. Repair offline from Recovery options

  1. 1.Open Settings.
  2. 2.Select System > Recovery.
  3. 3.Under Recovery options, next to Advanced startup, select Restart now.
  4. 4.In Windows Recovery Environment, select Troubleshoot > Advanced options > Command Prompt.
  5. 5.Run BCDEdit and note the Windows volume shown next to osdevice.
  6. 6.Run SFC /scannow /offbootdir=D:\ /offwindir=D:\windows, replacing D: with the correct Windows volume.

Use offline SFC when you need to repair Windows from Windows Recovery Environment instead of the running copy of Windows. You can also press and hold Shift while selecting Power > Restart from Start or the sign-in screen, then open Troubleshoot > Advanced options > Command Prompt and run the same offline command.

5. Force recovery when Windows will not boot

When Windows does not reach the desktop, Automatic Repair can still lead to the recovery Command Prompt.

  1. 1.Start the device and wait for the Windows logo or manufacturer logo.
  2. 2.Press and hold the power button until the device shuts down.
  3. 3.Repeat that shutdown once.
  4. 4.Turn on the device a third time.
  5. 5.On the Automatic Repair screen, select Advanced options.
  6. 6.Select Troubleshoot > Advanced options > Command Prompt.
  7. 7.Run BCDEdit and identify the Windows volume.
  8. 8.Run SFC /scannow /offbootdir=D:\ /offwindir=D:\windows with the correct drive letter.

A USB recovery drive reaches the same place: boot from the recovery drive, select Troubleshoot > Advanced options > Command Prompt, identify the Windows volume with BCDEdit, then run offline SFC.

6. Create installation media for a dead PC

  1. 1.On a working PC, open Microsoft’s Download Windows 11 page.
  2. 2.Under Create Windows 11 Installation Media, select Download Now.
  3. 3.Run the Media Creation Tool as an administrator.
  4. 4.Accept the license terms.
  5. 5.Select Create installation media for another PC, then create a bootable USB or ISO.
  6. 6.Connect the media to the nonfunctional PC and turn it on.
  7. 7.On the initial setup screen, select language and other preferences, then select Next.
  8. 8.Select Repair my PC, then select Next to access Windows Recovery Environment.
  9. 9.Select Troubleshoot > Advanced options > Command Prompt.
  10. 10.Run BCDEdit, then run SFC /scannow /offbootdir=D:\ /offwindir=D:\windows with the correct Windows volume.

If there is no recovery drive, Windows 11 installation media can open Windows Recovery Environment on the nonworking PC. The Media Creation Tool creates media only for x64 processors; for Arm-based PCs, use Microsoft’s Windows 11 Arm64 ISO instead, and note that manufacturer drivers may be needed to make bootable media.

7. Check what SFC repaired

SFC reports whether it repaired files or could not repair some of them. To see the file-level details, create an sfcdetails.txt file from the CBS log.

  1. 1.Open Command Prompt with Run as administrator.
  2. 2.Run findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt".
  3. 3.Open Sfcdetails.txt from the desktop.
  4. 4.Check the latest date and time entries for files SFC repaired or could not repair.

For one protected file, open an elevated Command Prompt or elevated Windows Terminal and run sfc /scanfile=<file>. Offline single-file repair uses the same /offbootdir and /offwindir pattern, with the correct path and drive letter.

8. Avoid old SFC switches

Do not use legacy switches such as /scanonce, /scanboot, /purgecache, /cachesize, /cancel, /enable, or /quiet for current Windows repairs. Microsoft’s current SFC syntax supports the repair paths above, including sfc /scannow, sfc /scanfile, and offline repair with /offbootdir and /offwindir.

After SFC reports corrupt files it could not fix, Microsoft documents an advanced manual replacement path: review Sfcdetails.txt, run takeown /f <Path_And_File_Name>, run icacls <Path_And_File_Name> /grant administrators:F, then copy a known-good file from the same Windows version with Copy <Source_File> <Destination>. On school or work-managed PCs, Windows Recovery Environment access and recovery authentication can also be affected by management settings, so administrator consent or credentials may be required.

Frequently Asked Questions

Does sfc /scannow need an internet connection?

While Windows is running, sfc /scannow runs locally from an elevated Command Prompt or elevated Windows Terminal with no internet connection. Inside Windows Recovery Environment, run offline SFC instead, such as SFC /scannow /offbootdir=C:\ /offwindir=C:\Windows, replacing the drive letter as needed. Microsoft’s recommended online repair order runs Windows updates and DISM before SFC.

What command should I use for offline SFC?

Use BCDEdit in Windows Recovery Environment to find the Windows volume, then run SFC /scannow /offbootdir=D:\ /offwindir=D:\windows with D: replaced by the correct drive letter.

Can SFC repair just one file?

Yes. From an elevated Command Prompt or elevated Windows Terminal, run sfc /scanfile=. For offline repair, add the documented /offbootdir and /offwindir switches with the correct path and drive letter.

What should I do with old SFC commands from older guides?

Skip /scanonce, /scanboot, /purgecache, /cachesize, /cancel, /enable, and /quiet on current Windows repair workflows. Use sfc /scannow, sfc /scanfile, or the offline /offbootdir and /offwindir syntax.

Share