How To Delete Files Protected by TrustedInstaller
How To Delete Files Protected by TrustedInstaller
If you try to delete or rename certain files that are installed by default in
Windows, for example EXPLORER.EXE you will soon discover that you can’t do
anything with the file even if you are a system admin. This is because they are
owned by a process called “Trusted Installer”.
If you try to rename or delete the file you will get the following warning appear
on your screen.
Once you have done this you will be able to delete, or rename the file. By
reading this “How To”, I will guide you through the required steps in order to
change the file ownership and permissions.
Browse to the file you want to change the permissions on, in the example I am
going to use Explore.exe which is in the c:\windows\ folder. Right Click the file
and select Properties
On the file properties tab you need to select the Security tab
Once on the Security tab you need to click on the Advanced button
On the advanced tab you will see that TrustedInstaller has full control over the
file, whilst everyone else has “read & execute” rights.
Once the security prompt has closed you can see in the owners tab that the file
permissions have changed to the account you selected.
Click OK on all the file properties tabs that are still open to close them. Once
closed Right click the file again and select properties. Then select the Security
Tab again.
This time on the security tab you select the Edit button
If the user name you changed the ownership to is not in the list then click on
the Add button
Type the beginning of the user name into the search box and click on the Check
Names button.
One you have added the user account, click on the OK button
Once the account that you gave ownership properties too is listed in the Group
or User Names window, click on the Allow box next to Full Control.
Click OK on both of the open file properties tabs to close them down.
This time when you go to delete the file you are allowed to.
This procedure will also work on folders in exactly the same way.