[Fix] RSAT Tools Error 0x8024002e or 0x800f0954

When you install RSAT Tools via Optional Features, DISM, or PowerShell, the error 0x8024002e or 0x800f0954 occurs. For example, here’s the entire error message when you install the RSAT Tools feature using PowerShell:

Add-WindowsCapability failed. Error code = 0x8024002e

-or-

Add-WindowsCapability failed. Error code = 0x800f0954

The error code 0x8024002e may occur even though the “Download repair content and optional features directly from Windows Updates instead of Windows Server Updates Services (WSUS)” Group Policy is enabled.

Cause

There may be other Windows Update policies that block access to Microsoft Windows Update servers. Ref: Manage additional Windows Update settings. For example, the GPO “Turn off access to all Windows Update features” (registry value: DisableWindowsUpdateAccess) may be blocking access to Windows Update.

The error code 0x8024002E (“WU_E_WU_DISABLED”) means “Access to an unmanaged server isn’t allowed.”

The error code 0x800f0954 can occur if the system is configured to download updates via WSUS instead of Windows Update.

Resolution

To resolve the error code 0x8024002E or 0x800f0954 when installing a feature on demand, such as RSAT Tools, use one of the methods below:

Method 1: Remove all Windows Update policies

From admin PowerShell, run these commands:

reg delete "HKCU\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /f

reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate" /f

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /f

reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate" /f

Restart-Service wuauserv

Note: If you get the error “ERROR: The system was unable to find the specified registry key or value”, ignore it and run the next command. Do not reboot Windows yet.

The above commands clear the Windows Update policies. If your system is managed by an active directory network, the policies will be reapplied automatically after a reboot. However, you can install the required FODs before the reboot.

Then, run the following command to install the RSAT Tools you require — e.g., RSAT Group Policy Management Tools.

Add-WindowsCapability –Online -Name Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0

That’s it. The above commands clear all Windows Update registry-based policies and install the RSAT GroupPolicy Management Tools.

Similarly, install any other RSAT feature you need using the Add-WindowsCapability PowerShell cmdlet. Here’s the list of RSAT Tools features.

Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0
Rsat.BitLocker.Recovery.Tools~~~~0.0.1.0
Rsat.CertificateServices.Tools~~~~0.0.1.0
Rsat.DHCP.Tools~~~~0.0.1.0
Rsat.Dns.Tools~~~~0.0.1.0
Rsat.FailoverCluster.Management.Tools~~~~0.0.1.0
Rsat.FileServices.Tools~~~~0.0.1.0
Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0
Rsat.IPAM.Client.Tools~~~~0.0.1.0
Rsat.LLDP.Tools~~~~0.0.1.0
Rsat.NetworkController.Tools~~~~0.0.1.0
Rsat.NetworkLoadBalancing.Tools~~~~0.0.1.0
Rsat.RemoteAccess.Management.Tools~~~~0.0.1.0
Rsat.RemoteDesktop.Services.Tools~~~~0.0.1.0
Rsat.ServerManager.Tools~~~~0.0.1.0
Rsat.Shielded.VM.Tools~~~~0.0.1.0
Rsat.StorageMigrationService.Management.Tools~~~~0.0.1.0
Rsat.StorageReplica.Tools~~~~0.0.1.0
Rsat.SystemInsights.Management.Tools~~~~0.0.1.0
Rsat.VolumeActivation.Tools~~~~0.0.1.0
Rsat.WSUS.Tools~~~~0.0.1.0

---

Method 2: Install the RSAT Tools Offline

Using the FOD ISO from Microsoft, you can install RSAT Tools or any other FOD offline in Windows 10 or 11.

For more information, please see How to Install a Feature On Demand (FOD) Package Offline.