Windows 10: Permission / Advanced Security Settings issue with Program Files

Apologies if this topic has previously been discussed, but my search didn't yield helpful results.

In attempting (unsuccessfully) to install a citrix plugin for remote desktop, I'm discovering that advanced security settings for Program Files are screwed up, but I am unable to adjust them. I am currently logged in as administrator and user account control settings are set to "never notify". Please see the attached screenshot. Thanks in advance.




:)

 

Having trouble with setting permissions on Windows 10.

Hi everyone. I have Windows 10 on my Surface Pro 4 M3 and I'm having trouble with setting permissions.

My goal is to be able to rename files located in the programfiles folder. But every time I do, it says I require permission from the user/admin.

I have set the owner to myself and have given myself full control so why is it asking myself for permission to rename a file?

These are the specific steps I am taking to try and rename the file:

1. Open file explorer

2. Navigate to C: drive.

3. Right click on Program Files

4. select properties

5. Select the Security tab.

6. Select Advanced

7. Change owner.

8. Set owner as (PCNAME\USER)

9. Check the box "Replace owner on subcontainers and objects"

10. Check the box "Replace all object permission entries with inheritable entries from this object"

11. Click apply.

It starts setting the security information to all the files and folder inside Program Files, but then I get an error at the end.

Error Applying Security - An error occurred while applying security information to: C:\Program Files. Failed to enumerate objects in the container. Access is denied.

This is then followed by a Windows Security error: Unable to save permission changes on Program Files. Access is denied.

Any help would be much appreciated. Thanks

 

Can't delete a folder within Program Files (x86)

I'm having an issue where I cannot delete a file in Program Files (x86) because I lack permission. I have tried to add permissions through the Properties>Security window but the options to add permissions are greyed out for every name on the list. Attempting
to change the owner by going into Advanced Security Settings runs into a similar problem, it tells me that access is denied. The hidden administrator account runs into the same problem as well, so I am at a loss on what to try next. I have also attempted changing
the permissions on the folder I want to delete, which works but when I try to delete it I get an error message saying I need permission from Nicholas, the name of the account I use.

***Post moved by the moderator to the appropriate forum category.***

 

What is the image you posted supposed to show? I don't see anything wrong. It's normal for Trusted Install to own the operating system directory trees like Program Files, Program Data, Windows, etc.

Your looks the same as mine:





Are you logged in as the normally hidden Administrator account or are you logged in as an Administrator level account?

 

I'm one step farther in than you. If you choose "change permissions", you'll see the screen that I posted. Problem is (or at least I suspect), "Add" "Remove" and "enable inheritance" are unavailable for me. I have logged in with the "hidden" administrator account, with no success.

 

If you want to change permissions of a file or directory you may need to take ownership first. So you could try to change the owner to your user profile and apply, You then may have to grant yourself the authority to make your change (so add full control for your profile for example).

Then you can change the permissions to whatever you want.

Once you are done you can remove your profile and then change owner back to "NT SERVICE\TrustedInstaller" or whatever it was to begin with.

Owner of Files and Folders - Change in Windows 10 - Windows 10 Forums

Note that only Program Files directory itself is owned by Trusted Installer. Sub-directories may not be - I have some owned by SYSTEM (for example 7-zip), some by Administrators group (for example MS Office), some by Trusted Installer (for example Windows Defender). You should therefore make a backup and be careful with using inheritance and of replacing owner of child objects so as not to mess everything up *Wink

I use Cisco VPN (and Cisco WebEx) and have not had to change any permissions and mine look like yours though so perhaps it is another issue.

 

Thank you, lx. With different ownership, I was able to change security settings on the folder that was preventing my installation.

 

Make sure you change ownership back to Trusted \Installer when done. I believe it's actually Windows_NT/TrustedInstaller or something like that.