Older tools and some installers still need .NET 3.5, and Windows no longer ships the payload. Point DISM at the sources\sxs folder of the matching ISO and the error disappears.
Check the feature with **Get-WindowsOptionalFeature -FeatureName NetFx3**, install it with **DISM /Enable-Feature /All /Source:<ISO>:\sources\sxs /LimitAccess**, and read the **0x800f** code if it fails again.
**DisabledWithPayloadRemoved** is the important state: the feature exists but the files are gone, which is why every online attempt fails on a machine without Windows Update access.
Get-WindowsOptionalFeature -Online -FeatureName NetFx3 | Select-Object FeatureName,State
DISM /Online /Get-FeatureInfo /FeatureName:NetFx3 | Select-String -Pattern 'State'If Windows Update is reachable, this is the shortest path and it downloads the payload itself. Note the error code, because it tells you which of the next steps you need.
DISM /Online /Enable-Feature /FeatureName:NetFx3 /AllThe source must be the same version, edition and architecture as the running system, or the payload is rejected. Mount it and read the drive letter from Windows, not from memory.
Mount-DiskImage -ImagePath D:\ISO\Win11_24H2.iso
Get-Volume | Where-Object DriveType -eq 'CD-ROM' | Select-Object DriveLetter,FileSystemLabel
Get-ChildItem E:\sources\sxs | Select-Object -First 3 Name**/Source** points at the folder that holds the payload, **/LimitAccess** stops Windows from phoning home and failing again. The install takes a few minutes and needs no network.
DISM /Online /Enable-Feature /FeatureName:NetFx3 /All /Source:E:\sources\sxs /LimitAccessThe feature state and the registry version key must agree. If the state says Enabled but an app still complains, the app is looking at a 32-bit or per-user path.
Get-WindowsOptionalFeature -Online -FeatureName NetFx3 | Select-Object State
Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.5' | Select-Object Install,VersionThe CBS log names the missing package and the path it tried. Thirty lines of tail are usually enough to see whether the source or the component store is the problem.
Get-Content C:\Windows\Logs\CBS\CBS.log -Tail 40 | Select-String -Pattern 'NetFx3|error|0x800f'
Dismount-DiskImage -ImagePath D:\ISO\Win11_24H2.isoThe path is wrong or the ISO does not match the build. Confirm the build with winver and the folder exists as <drive>:\sources\sxs.
A WSUS or group policy forbids Windows Update as a source. Add /LimitAccess and use the ISO source, and repeat with the same DISM command.
A pending servicing operation blocks it. Reboot first, then run the command again; check the RebootPending registry value if it keeps happening.
Old installers check the 32-bit registry view. Confirm with the app's own log, and repair the app rather than reinstalling the framework.
No, and 4.8 does not cover it. Both can be installed side by side and old applications need the 3.5 runtime specifically.
No. The offline source is for machines without update access, for WSUS-restricted networks, and for repeatable installs.
Remove the feature again with DISM /Online /Disable-Feature /FeatureName:NetFx3 /Remove, and dismount the ISO with Dismount-DiskImage. Apps that need it will stop working, so remove them together.
Free · no account needed · tracks your progress