Windows 10: Restore special permissions of C:\Program Files\WindowsApps and subs

Hello @all... it is about
C:\Program Files\WindowsApps
and its subfolders like
Fitbit.Fitbit_2.44.1997.0_x64__6mqt6hf9g46tw

1 I had troubles deinstalling junk apps. So I changed the owner of all Files and Folders to the admin group
2 I added read permissions for all packages and users with inheritance and replaced existing permissions.

BUT doing that I lost

3 this special permission WIN://SYSAPPID Contains "AppName" shown on the upper part of the screenshot
(C:\Program Files\WindowsApps\828B5831.HiddenCityMysteryofShadows_1.34.3402.0_neutral_~_ytsefhwckbdv6)

4 The Fitbit app (and many others) lost this permission. It is shown in the lower part of the screenshot

5 Right now everything works until the next W10 update (where trusted installer is set as owner, the special perm. is still missing and permissions for users and packages got lost). So I have to redo all the owner and permission settings again. And in the meantime the file associations to those apps also got lost) !!!

6 I saved .acl from the upper (correct) app with icacls and it looks like this 828B5831.HiddenCityMysteryofShadows_1.34.3402.0_neutral_~_ytsefhwckbdv6
D:AI (XA;OICI;0x1200a9;;;BU;(WIN://SYSAPPID Contains "828B5831.HiddenCityMysteryofShadows_ytsefhwckbdv6")) ...

Now i count on You ;-):
How can I restore this special permissions including the owner trustedInstaller for all those subfolders and files
? Especially how is the solution for the gerneric part of the AppName.

7 Maybe it could be some kind of FOR loop iterating the folders layer below C:\Program Files\WindowsApps. And then set the inheritance for all subfolders and files below those.

8 OR maybe an easier alternative is to reinstall all those apps. In that case I would be very greatfull for the right powershell commands ;-). I tried
Code:

but the special permission is still not present :-(




:)

 

Getting full access to C:\Program Files\WindowsApps

Hey x509,
IIRC ... it's not actually a corrupt entry, but a special permission/condition (Exists:WIN://SYSAPPID) for Users(Pc-Name\Users) and shouldn't be removed. If you must change permissions on the WindowsApps folder and/or sub folders/files .... I suggest you get familiar with ICACLS first and save the current WindowsApps Folder / Sub Folders / File permissions to a acl.txt file, so you can restore them in case you break something (which is very likely when messing with permissions)

ICACLS - iCacls - Modify Access Control List - Windows CMD - SS64.com

 

Why I can not open C:\Program Files\WindowsApps ?

Hey camelia,
FYI .. that "access control entry is corrupt" message is misleading. It's actually a special permission/condition that is suppose to be there and I would not change/mess with it .... IIRC it's the user DOMAIN\USERS with the Condition Exists (Win://SYSAPPID)

BTW ... if you're just wanting to take a look inside the C:\Program Files\WindowsApps you should be able to do it by opening a Command Prompt as Admin and cd C:\Program Files\WindowsApps then dir to list the folders.

 

Fix permissions of C:\Program Files\WindowsApps

Restore WindowsApps permissions as follows, using an elevated command prompt:

source: Reset default ACLs for C:\Program Files\WindowsApps