TrustedInstaller Permissions: How to Add, Delete, or Change System Files

It’s not uncommon for a Windows user to come across an error that requires special permissions. For example, if you’ve ever tried to delete core system files, you likely came across a Folder Access Denied prompt that reads, “You require permission from TrustedInstaller to make changes to this folder.”

This might make you feel like you’re not in total control, but Microsoft has added the NT SERVICE\TrustedInstaller account to protect your system. 

What is TrustedInstaller?

TrustedInstaller is a core component of Windows Resource Protection that Microsoft introduced with Windows Vista. In addition, the Windows Modules Installer service uses the TrustedInstaller account to add, remove, or modify Windows updates and other components.

Deleting or modifying files or folders owned by TrustedInstaller may prevent your Windows installation from running properly. Think of it as another safeguard that prevents even an administrator account from deleting core Windows files. However, sometimes you may need to fix or modify corrupt system files, for which you’ll require TrustedInstaller permission. 

If you’re confident that what you’re doing is safe, you can take ownership of these files from TrustedInstaller. Nevertheless, it’s always a good practice to create a system restore point, just in case.

Take Ownership from TrustedInstaller

There are two methods of taking ownership from TrustedInstaller.

Using the Advanced Security Settings

This is a long, but user-friendly way to gain ownership of a folder. 

1. Navigate to the folder using file explorer.
2. Right-click on the folder and select Properties.

3. Navigate to the Security tab and select Advanced at the bottom-right corner.

4. A new window will open where you’ll see TrustedInstaller as the owner of the folder. Select Change to change the owner.

5. Now, Windows will ask you to Enter the object name to select. Enter the user name you want to transfer the ownership to. 
6. Click Check Names to complete the full object name and select OK. 

7. When you return to the Advanced Security Settings window, you’ll see a new checkbox right below the Owner name that reads Replace owner on subcontainers and objects. Check this box to transfer the ownership of all subfolders and files.

8. Click OK to close the window. Then, open the window again by selecting Advanced. 
9. Select Change permissions from the bottom left of the window.

10. Select Add. This will open a new window. 

11. Click on Select a principal from the top and repeat steps 5 and 6.

12. Check the box beside Full control under Basic permission, and select OK.

13. Apply the changes and press OK.

Performing these steps will give you ownership of the folder, and you will no longer require permission from TrustedInstaller to make changes to it.

Using Command Prompt

If you know how to use the Command Prompt, you can transfer ownership much faster than the previous method.

1. Start by opening an elevated command prompt following the steps below. 
   • Search for cmd in the Start Menu.
   • Right-click on Command Prompt
   • Select Run as administrator. 

2. Run the following command:

TAKEOWN /F “C:\Program Files\Internet Explorer”

Of course, change the path to the folder you want to transfer ownership for.

3. If all goes well, you’ll see a message telling you that you’ve successfully transferred ownership.

You can now go ahead and modify or remove Windows folders as you please. But always ensure that you don’t remove any critical components that will prevent Windows from functioning properly.