How to Reset WindowsApps folder Permissions to Default

Summary: This article tells you how to reset the WindowsApps folder permissions (and ownership) to Windows default.

The WindowsApps folder under the Program Files folder stores the modern app packages. Each package folder under WindowsApps contains a manifest (named AppxManifest.xml) that contains a special XML namespace for packaged apps. When you reinstall built-in apps using PowerShell add-appxpackage command-line, it uses the corresponding app’s package folder under WindowsApps.

The WindowsApps folder is not browsable in File Explorer by default. This is due to tight permissions assigned to the folder.

windowsapps restore default permissions

To access this folder, many users tend to take ownership of the folder and sub-folders. Some users also change the permissions for this folder and sub-folders arbitrarily, and later observe that some of the installed Store apps fail to work.

warning caution iconEven worse is that some users would reset the permissions for WindowsApps, its subfolders, and files (recursively) using the Icacls.exe reset command-line. This is not recommended, as the WindowsApps folder doesn’t inherit any permission entries from the parent (Program Files) folder by default. Instead, this folder has very restricted permissions, including one or more conditional ACEs.

Restore the Default Permissions for WindowsApps

To reset the WindowsApps folder permissions to Windows default, follow these steps:

Editor’s note: Before proceeding, it’s advisable to take a complete system image backup using Macrium Reflect Free, Acronis True Image, or any other backup tool. This is because if you inadvertently assign the wrong permissions to the WindowsApps folder, it might prevent you from installing and running Store apps.

(The following fix has been tested on Windows 10 versions 2004, 20H2, 21H1, and 21H2.)

Open an admin Command Prompt window, and run the following commands one by one:

Command #1

takeown /f "%programfiles%\WindowsApps"

You should see the following output:

SUCCESS: The file (or folder): "C:\Program Files\WindowsApps" now owned by user "computer_name\user_name".

The above command is to take ownership of the WindowsApps folder. This is required to apply the permissions (in the next step.)

Command #2

cacls "%programfiles%\WindowsApps" /s:"D:PAI(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;OICIIO;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1200a9;;;S-1-15-3-1024-3635283841-2530182609-996808640-1887759898-3848208603-3313616867-983405619-2501854204)(A;OICIIO;GXGR;;;S-1-15-3-1024-3635283841-2530182609-996808640-1887759898-3848208603-3313616867-983405619-2501854204)(A;;FA;;;SY)(A;OICIIO;GA;;;SY)(A;CI;0x1200a9;;;BA)(A;OICI;0x1200a9;;;LS)(A;OICI;0x1200a9;;;NS)(A;OICI;0x1200a9;;;RC)(XA;;0x1200a9;;;BU;(Exists WIN://SYSAPPID))"

When you’re prompted with the question, Are you sure (Y/N)? type Y.

The above command-line, which consists of an SDDL string, applies the Windows-default permission entries for the WindowsApps folder. For an alternate method of the above, see cacls vs. icacls paragraph below.

Command #3

icacls "%programfiles%\WindowsApps" /setowner "nt service\trustedinstaller"

You should see the following output:

processed file: WindowsApps
Successfully processed 1 files; Failed processing 0 files

The above command restores the WindowsApps folder’s ownership back to the TrustedInstaller account, which is the factory default setting.



WindowsApps – Default ACL

Here are the default access control entries (Windows 10 v2004, 20H2, 21H1, and 21H2) for the WindowsApps folder:

NT SERVICE\TrustedInstaller:(F)
NT SERVICE\TrustedInstaller:(OI)(CI)(IO)(F)
S-1-15-3-1024-3635283841-2530182609-996808640-1887759898-3848208603-3313616867-983405619-2501854204:(RX)
S-1-15-3-1024-3635283841-2530182609-996808640-1887759898-3848208603-3313616867-983405619-2501854204:(OI)(CI)(IO)(GR,GE)
NT AUTHORITY\SYSTEM:(F)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
BUILTIN\Administrators:(CI)(RX)
NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(RX)
NT AUTHORITY\NETWORK SERVICE:(OI)(CI)(RX)
NT AUTHORITY\RESTRICTED:(OI)(CI)(RX)
BUILTIN\Users:(Rc,S,RD,REA,X,RA)

Note: You can view the permissions for the folder by running the command icacls "c:\program files\windowsapps".

The long SIDs are the Capability SIDs built-in to Windows 10. The Capability SIDs don’t resolve to a friendly account name. For more information, check out the Microsoft article Some SIDs do not resolve into friendly names. Microsoft suggests that you DO NOT DELETE capability SIDs from either the Registry or file system permissions.


Additional Information

CACLS vs. ICACLS

The deprecated tool cacls.exe is superseded by icacls.exe. But cacls.exe still works in Windows 10. In case Microsoft removes cacls.exe in future Windows versions, you can apply the ACLs using this method as an alternative for Command #2 above :

  1. Using Notepad, create a text file with the following contents:
    windowsapps
    D:PAI(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;OICIIO;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1200a9;;;S-1-15-3-1024-3635283841-2530182609-996808640-1887759898-3848208603-3313616867-983405619-2501854204)(A;OICIIO;GXGR;;;S-1-15-3-1024-3635283841-2530182609-996808640-1887759898-3848208603-3313616867-983405619-2501854204)(A;;FA;;;SY)(A;OICIIO;GA;;;SY)(A;CI;0x1200a9;;;BA)(A;OICI;0x1200a9;;;LS)(A;OICI;0x1200a9;;;NS)(A;OICI;0x1200a9;;;RC)(XA;;0x1200a9;;;BU;(Exists WIN://SYSAPPID))
  2. Save the file as acl.txt in a folder — e.g. d:\temp\acl.txt
  3. Next, run the following command-line from an admin Command Prompt:
    icacls "%programfiles%" /restore d:\temp\acl.txt

    Note: When restoring ACL with icacls.exe, you must mention the parent folder name instead of the folder you want to apply the permissions.


What about the subfolders of WindowsApps?

Most of the sub-folders under WindowsApps are owned by SYSTEM,  some of them are owned by Administrators, and a couple of folders by TrustedInstaller. Here’s a listing from a Windows 10 v20H2 computer:

Name : 7EE7776C.LinkedInforWindows_2.1.7098.0_neutral_split.scale-100_w1wdnht996qgy
Owner : NT AUTHORITY\SYSTEM

Name : 7EE7776C.LinkedInforWindows_2.1.7098.0_neutral__w1wdnht996qgy
Owner : NT AUTHORITY\SYSTEM

Name : 7EE7776C.LinkedInforWindows_2.1.7098.0_neutral_~_w1wdnht996qgy
Owner : NT AUTHORITY\SYSTEM

Name : Deleted
Owner : NT SERVICE\TrustedInstaller

Name : DeletedAllUserPackages
Owner : NT AUTHORITY\SYSTEM

Name : king.com.CandyCrushFriends_1.12.4.0_x86__kgqvnymyfvs32
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.549981C3F5F10_2.2010.22653.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.549981C3F5F10_2.2010.22653.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.549981C3F5F10_2.2010.7621.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.549981C3F5F10_2.2010.7621.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.BingNews_4.30.10924.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.BingNews_4.30.10924.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.BingNews_4.30.10924.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.BingWeather_4.46.22742.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.BingWeather_4.46.22742.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.BingWeather_4.9.30002.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.DesktopAppInstaller_1.0.32912.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.DesktopAppInstaller_1.0.32912.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.DesktopAppInstaller_2019.1019.1.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.GetHelp_10.2004.31291.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.GetHelp_10.2004.31291.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.GetHelp_10.2004.31291.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Getstarted_9.10.32461.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Getstarted_9.10.32461.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.HEIFImageExtension_1.0.32532.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.HEVCVideoExtension_1.0.32762.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Messaging_4.1901.10241.1000_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Microsoft3DViewer_2020.2009.29132.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Microsoft3DViewer_7.2009.29132.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftEdge.Stable_86.0.622.48_neutral__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftEdge.Stable_86.0.622.51_neutral__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftOfficeHub_18.2008.12711.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftOfficeHub_18.2008.12711.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftOfficeHub_18.2008.12711.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftSolitaireCollection_4.7.8101.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftSolitaireCollection_4.7.8101.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftStickyNotes_3.7.142.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftStickyNotes_3.7.142.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MicrosoftStickyNotes_3.7.142.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MixedReality.Portal_2000.20081.1312.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MixedReality.Portal_2000.20081.1312.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MixedReality.Portal_2000.20081.1312.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MSPaint_2020.2009.30067.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.MSPaint_6.2009.30067.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.1.2_1.2.23231.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.1.2_1.2.23231.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.1.6_1.6.27413.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.1.6_1.6.27413.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.NET.Native.Framework.1.7_1.7.27413.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.1.7_1.7.27413.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.2.0_2.0.27427.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.2.0_2.0.27427.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.2.1_2.1.27427.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.2.1_2.1.27427.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.2.2_2.2.27405.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.NET.Native.Framework.2.2_2.2.27405.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.2.2_2.2.27912.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Framework.2.2_2.2.27912.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.1.1_1.1.23406.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.1.1_1.1.23406.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x86__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.NET.Native.Runtime.1.7_1.7.27422.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.1.7_1.7.27422.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.2.0_2.0.25709.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.2.0_2.0.25709.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.2.1_2.1.26424.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.2.1_2.1.26424.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.2.2_2.2.27328.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.NET.Native.Runtime.2.2_2.2.27328.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Office.OneNote_16001.13127.20190.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Office.OneNote_16001.13127.20190.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.OneConnect_5.1906.1791.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.People_10.1909.10841.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.People_10.1909.10841.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.People_2020.324.807.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Print3D_3.3.791.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Print3D_3.3.791.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.RemoteDesktop_10.2.1534.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.RemoteDesktop_10.2.1534.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.RemoteDesktop_10.2.1534.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.RemoteDesktop_10.2.1535.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.RemoteDesktop_10.2.1535.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.RemoteDesktop_10.2.1535.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.ScreenSketch_10.2008.2277.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.ScreenSketch_10.2008.2277.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.ScreenSketch_2020.814.2355.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Services.Store.Engagement_10.0.18101.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.Services.Store.Engagement_10.0.18101.0_x86__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.Services.Store.Engagement_10.0.19011.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Services.Store.Engagement_10.0.19011.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.SkypeApp_15.65.78.0_neutral_~_kzf8qxf38zg5c
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.StorePurchaseApp_12010.1001.2.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.StorePurchaseApp_12010.1001.213.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.UI.Xaml.2.0_2.1810.18004.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.UI.Xaml.2.0_2.1810.18004.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.UI.Xaml.2.1_2.11906.6001.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.UI.Xaml.2.1_2.11906.6001.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.UI.Xaml.2.3_2.32002.13001.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.UI.Xaml.2.3_2.32002.13001.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.UI.Xaml.2.4_2.42007.9001.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VCLibs.120.00.Universal_12.0.30501.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VCLibs.120.00.Universal_12.0.30501.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VCLibs.140.00.UWPDesktop_14.0.27323.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VCLibs.140.00.UWPDesktop_14.0.27323.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VCLibs.140.00.UWPDesktop_14.0.29016.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VCLibs.140.00.UWPDesktop_14.0.29231.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VCLibs.140.00.UWPDesktop_14.0.29231.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VCLibs.140.00_14.0.27323.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.VCLibs.140.00_14.0.27323.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VCLibs.140.00_14.0.29231.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VCLibs.140.00_14.0.29231.0_x86__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.VP9VideoExtensions_1.0.32521.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Wallet_2.4.18324.0_neutral_~_8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.Wallet_2.4.18324.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.WebMediaExtensions_1.0.20875.0_neutral_~_8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.WebpImageExtension_1.0.32731.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Windows.Photos_2020.20090.1002.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Windows.Photos_2020.20090.1002.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Windows.Photos_2020.20090.1002.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsAlarms_10.2007.3.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsAlarms_10.2007.3.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsAlarms_10.2009.5.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsAlarms_10.2009.5.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsAlarms_2021.2007.3.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsAlarms_2021.2009.5.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsCalculator_10.2009.4.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsCalculator_10.2009.4.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsCalculator_2020.2009.4.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsCamera_2020.504.60.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsCamera_2020.504.60.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : microsoft.windowscommunicationsapps_16005.13228.41011.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : microsoft.windowscommunicationsapps_16005.13228.41011.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsFeedbackHub_1.1907.3152.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.WindowsFeedbackHub_2019.1111.2029.0_neutral_~_8wekyb3d8bbwe
Owner : BUILTIN\Administrators

Name : Microsoft.WindowsMaps_10.2008.0.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsMaps_10.2008.0.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsMaps_10.2009.2.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsMaps_10.2009.2.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsMaps_2021.2008.0.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsMaps_2021.2009.2.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsSoundRecorder_10.2008.0.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsSoundRecorder_10.2009.2.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsSoundRecorder_2021.2008.0.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsSoundRecorder_2021.2009.2.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsStore_12010.1001.3.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsStore_12010.1001.3.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.WindowsStore_12010.1001.313.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Xbox.TCUI_1.24.10001.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.Xbox.TCUI_1.24.10001.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxApp_48.69.18001.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxApp_48.69.18001.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxApp_48.70.21001.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxApp_48.70.21001.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxGameOverlay_1.54.4001.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxGameOverlay_1.54.4001.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxGameOverlay_1.54.4001.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxGamingOverlay_5.420.8043.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxGamingOverlay_5.420.8043.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxGamingOverlay_5.420.8043.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxIdentityProvider_12.67.21001.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxIdentityProvider_12.67.21001.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxSpeechToTextOverlay_1.21.13002.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxSpeechToTextOverlay_1.21.13002.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.XboxSpeechToTextOverlay_1.21.13002.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.ZuneMusic_10.20092.10311.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.ZuneMusic_10.20092.10311.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.ZuneMusic_2019.20092.10311.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.ZuneVideo_10.20082.10421.0_neutral_split.scale-100_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.ZuneVideo_10.20082.10421.0_x64__8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : Microsoft.ZuneVideo_2019.20082.10421.0_neutral_~_8wekyb3d8bbwe
Owner : NT AUTHORITY\SYSTEM

Name : MovedPackages
Owner : NT AUTHORITY\SYSTEM

Name : Mutable
Owner : NT SERVICE\TrustedInstaller

Name : MutableBackup
Owner : NT SERVICE\TrustedInstaller

Name : SharedLimitedTime
Owner : BUILTIN\Administrators

As you can see, most of the package folders are owned by SYSTEM, some of them by Administrators, and a few are owned by TrustedInstaller.

You can view the owner name of each subfolder by running the command from admin Command Prompt:

dir "%programfiles%\windowsapps" /q /ad

Or, the following command from admin PowerShell prompt:

Get-ChildItem "C:\Program Files\WindowsApps" | Select Name,@{Name="Owner";Expression={(Get-ACL $_.Fullname).Owner}} | format-list

Fixing permissions for the package folders can be done on a per-folder basis rather than changing them en masse.

(20H2 is the current Windows 10 version is as of this article.)


One small request: If you liked this post, please share this?

One "tiny" share from you would seriously help a lot with the growth of this blog. Some great suggestions:
  • Pin it!
  • Share it to your favorite blog + Facebook, Reddit
  • Tweet it!
So thank you so much for your support. It won't take more than 10 seconds of your time. The share buttons are right below. :)

Ramesh Srinivasan is passionate about Microsoft technologies and he has been a consecutive ten-time recipient of the Microsoft Most Valuable Professional award in the Windows Shell/Desktop Experience category, from 2003 to 2012. He loves to troubleshoot and write about Windows. Ramesh founded Winhelponline.com in 2005.

16 thoughts on “How to Reset WindowsApps folder Permissions to Default”

  1. Hey, we give permissions to the local user to make edits with this string:

    takeown /f “%programfiles%\WindowsApps”

    When we follow the entire procedure the local user loses these permissions?

    Because I got the local user permissions manually (using the security window), then i gave back ownership to TrustedInstaller (always through the windows interface, not prompt) but I still have access to the folder (the local user, me, has total control on the folder and i can’t deactivate it).

    Would this guide help?

    Reply
  2. Thank you so much! These commands, followed by typing the “NT Service\TrustedInstaller” and clicking ‘Check Names’ to add the TrustedInstaller account on the “Select User or Group” page, is what seems to have fixed the issue.

    Never will I ever mess with the WindowsApps folder again.

    Reply
  3. Oct 2021: I have Windows 10 Pro 21H1 19043 Build 19043. The instructions provided are not clear… especially to someone only moderately familiar with command line structure, and the Windows system. Imagine what a complete computer novice would be trying to understand from this post. Yet these are precisely the folks most likely to NEED the help.

    What we NEED to know is how to change not ONLY the WindowsApps folder permissions back to the default “out of the box” configuration BUT ALSO how to change all of the subfolders of WindowsApps back to THEIR original configurations at the SAME TIME.

    This post makes it seem like you can restore JUST the WindowsApps folder permissions to default and then everything (the apps) will all start “magically” working again.

    We also don’t know what build (with what updates applied) of Windows 10 this “fix” will work on and someone could really screw up their computer if they apply the wrong “fix”to the wrong machine. For example, I have Windows 10 Pro 19043 21H1 Build 19043 with all required updates applied but NOT optional update KB5005611. Would these commands work for me ??

    ALL posts should START with the date of the post and then say which version(s) of the OS the explained “fix” applies to. Things change quickly in computing so an old “fix” could become your worst “nightmare” if the underlying architecture has changed since the “fix” was published.

    PLEASE update this post and let us know IF there is a “fix” that will restore ALL of the WindowsApps folder defaults, as well as the defaults of all of its subfolders and files without having to resort to a full system restore from a previous restore point or doing an in-place upgrade with Microsoft’s Media Creation Tool.

    We shouldn’t have to start from scratch just because we screwed up folder ownwership, permissions, inheritances, or “Replace child object…” choices in the interface. Their ought to be a way to simply UNDO any mistakes made from tinkering with this one folder. If WindowsApps is THAT important, and SOOOO protected…. why isn’t there simply a “restore defaults” option for this folder and it’s subfolders and files ???

    This “fix” seems too scary to apply without even more detailed explanation.

    Thanks for any further help or clarification you can provide !

    Reply
  4. Hey,
    Thanks for this list. I’d accidentally recursively taken ownership of the entire WindowsApps directory. Since most of them are SYSTEM owned, I did the same again, only I set everything in the directory to recursively being owned by SYSTEM. Then I went down that list, finding anything that was actually in my system and changing them one by one and setting their child objects to inherit. I’m sure there’s still some stuff in there that could be fixed since there’s no way you could have a list of everything in my system, but at least now some of the more important ones are back to normal and anything else is just owned by SYSTEM.

    I actually had noticed very little issues going on after my error, the only thing that hasn’t been working is System Restore points keep failing if I try to roll back. Maybe/Hopefully this will help! Either way, thanks a lot!

    Reply
  5. Hi after running all the commands, the ace output of “c:\program files\windowsapps” matches with what you have shown, BUT now none of my windows apps are working!!! Seriously stumped 🙁 Any help would be appreciated!!!

    Reply
    • @rm: Hi, What’s your Windows 10 version? Restoring correct ownership (Trusted Installer) for the WindowsApps folder shouldn’t cause any harm to the installed apps.

      What does the command-line show:

      icacls "%programfiles%\WindowsApps"

      (Pls run that command as Trusted Installer, and post the output here.)

  6. on 2 command i got after Y prossed dir c:\program files\windowsapps then when i did #3 command where you set owner to trustedinstaller i got successfully prosessed 0 files faild prossing 1 files how come

    Reply
  7. This doesn’t work for Windows 11.
    I get the following:
    icacls “%programfiles%” /restore c:\temp\acl.txt
    C:\Program Files\圢湩潤獷灁獰ഢ∊㩄䅐⡉㭁䘻㭁㬻ⵓⴱⴵ〸㤭㘵〰㠸㔸㌭ㄴ㔸㈲㐶ⴹ㠱ㄳ㌰〸㐴ㄭ㔸㈳㈹㌶ⴱ㈲ㄷ㜴㐸㐶⠩㭁䥏䥃佉䜻㭁㬻ⵓⴱⴵ〸㤭㘵〰㠸㔸㌭ㄴ㔸㈲㐶ⴹ㠱ㄳ㌰〸㐴ㄭ㔸㈳㈹㌶ⴱ㈲ㄷ㜴㐸㐶⠩㭁〻ㅸ〲愰㬹㬻ⵓⴱ㔱㌭ㄭ㈰ⴴ㘳㔳㠲㠳ㄴ㈭㌵㄰㈸〶ⴹ㤹㠶㠰㐶ⴰ㠱㜸㔷㠹 㠹㌭㐸㈸㠰〶ⴳ㌳㌱ㄶ㠶㜶㤭㌸〴㘵㤱㈭〵㠱㐵〲⤴䄨伻䍉䥉㭏塇則㬻医ㄭㄭⴵⴳ〱㐲㌭㌶㈵㌸㐸ⴱ㔲〳㠱㘲㤰㤭㘹〸㘸〴ㄭ㠸㜷㤵㤸ⴸ㠳㠴〲㘸㌰㌭ㄳ㘳㘱㘸ⴷ㠹㐳㔰ㄶⴹ㔲㄰㔸㈴㐰⠩㭁䘻㭁㬻奓⠩㭁䥏䥃佉䜻㭁㬻奓⠩㭁䥃〻ㅸ〲愰㬹㬻䅂⠩㭁䥏䥃〻ㅸ〲愰㬹㬻卌⠩㭁䥏䥃〻ㅸ〲愰 㬹㬻华⠩㭁䥏䥃〻ㅸ〲愰㬹㬻䍒⠩䅘㬻砰㈱〰㥡㬻䈻㭕䔨楸瑳⁳䥗㩎⼯奓䅓偐䑉⤩: The system cannot find the path specified.
    Successfully processed 0 files; Failed processing 1 files

    Reply
  8. Does not work when I reach this command :

    icacls “WindowsApps” /setowner “nt service\trustedinstaller”

    I have a PowerShell opened as Administrator.
    It says to me :

    WindowsApps: Access is denied.
    Successfully processed 0 files; Failed processing 1 files

    All previous commands did work fine.

    Reply

Leave a Reply to ConcernedUser Cancel reply