{"id":3815,"date":"2016-08-15T13:24:10","date_gmt":"2016-08-15T07:54:10","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=3815"},"modified":"2022-12-23T20:47:08","modified_gmt":"2022-12-23T15:17:08","slug":"run-program-as-trustedinstaller-locked-registry-keys-files","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/run-program-as-trustedinstaller-locked-registry-keys-files\/","title":{"rendered":"How to Run Programs as TrustedInstaller to Write to Certain Registry Keys or Files"},"content":{"rendered":"

Even when running programs elevated (Administrator), certain registry keys and files are not writable. This may be because the files are owned by TrustedInstaller, and no write access granted for Administrators. In that case, running the program as TrustedInstaller can help fix a locked registry key or clear a file that can’t be accessed anyway.<\/p>\n

\"run-as-trusted-installer\"<\/p>\n

RELATED:<\/strong> How to Run a Program Under SYSTEM (LocalSystem) Account in Windows<\/a><\/div>\n
\n

Methods to run a program as TrustedInstaller:<\/h4>\n
    \n
  1. Advanced Run from NirSoft<\/a><\/li>\n
  2. PowerRun<\/a><\/li>\n
  3. NSudo from M2Team<\/a><\/li>\n
  4. Process Hacker<\/a><\/li>\n
  5. RunX from d7xTech<\/a><\/li>\n<\/ol>\n<\/div>\n

    How to Run Programs as TrustedInstaller<\/h2>\n

    You can launch programs as TrustedInstaller using different tools or methods. Follow one of the tools below that suits you.<\/p>\n

    <\/a>AdvancedRun<\/h3>\n

    AdvancedRun<\/a> from Nirsoft allows you to run a program with different settings that you choose, including \u2013 low or high priority, start directory, main window state (Minimized\/Maximized), run the program with different user or permissions, Operating system compatibility settings, and environment variables. You can also save the desired settings into a configuration file and then run the program automatically from the command-line with the desired settings.<\/p>\n

    Using Advanced Run, you also launch a program under SYSTEM<\/a>, TrustedInstaller, or a different user context.<\/p>\n

    \"advancedrun<\/p>\n

    \nYou can also use the following AdvancedRun command-line syntax to launch a program as TrustedInstaller.<\/p>\n
    AdvancedRun.exe \/EXEFilename \"c:\\windows\\system32\\cmd.exe\" \/RunAs 8 \/Run<\/pre>\n
    The above launches Command Prompt as TrustedInstaller.<\/p>\n
    In the above example, the ‘8’ value of the \/RunAs parameter sets the Run As mode to TrustedInstaller. To run a program as SYSTEM user, pass the value ‘4’. If you don’t know what is the right value to use from command-line, simply choose the desired option from the user interface, save it to config file, and then check the values stored in the config (.cfg) file.<\/em>\n<\/div>\n
    \n
    <\/a>PowerRun<\/h3>\n
    PowerRun is a freeware utility that can launch programs under the TrustedInstaller privileges. If you have a locked-down registry key or a file owned by TrustedInstaller and can’t rename or replace the file, this tool can help.<\/p>\n
    Download PowerRun<\/a> and run it. Add the necessary program(s) to the list and run as TrustedInstaller.<\/p>\n
    \"powerrun<\/p>\n
    PowerRun command-line support<\/h4>\n
    PowerRun supports the following command-line arguments.<\/p>\n
    Usage: PowerRun_x64.exe [\/SW:<Window State (0-3)] [\/WD:<Working Directory>]\r\n[<file path> Required!] [<file commands>]\r\n\r\nCommands:<\/strong>\r\n\r\n\/SW:0 = Hide window\r\n\/SW:1 = Show window (Default)\r\n\/SW:2 = Minimize window\r\n\/SW:3 = Maximize window\r\n\/WD:(Path) = Working directory\r\n\/SYS = Only System User (Not TrustedInstaller)\r\n\r\nExamples:<\/strong>\r\n\r\nPowerRun_x64.exe \"C:\\Test.exe\"\r\nPowerRun_x64.exe \"C:\\Test.exe\" param1 param2 etc.\r\nPowerRun_x64.exe \"C:\\Test.bat\" param1 param2 etc.\r\nPowerRun_x64.exe \/SW:2 \"\/WD:C:\\\" notepad.exe C:\\test.txt\r\nPowerRun_x64.exe Regedit.exe \"C:\\Test.reg\"\r\nPowerRun_x64.exe Regedit.exe \/S C:\\Test.reg\r\nPowerRun_x64.exe %SystemRoot%\\system32\\cmd.exe\r\nPowerRun_x64.exe cmd.exe \/k echo hello world!\r\nPowerRun_x64.exe \/SYS cmd.exe \/k echo hello world!\r\nPowerRun_x64.exe \/SW:0 \"Reg.exe\" add \"HKLM\\Software\\keyname\" \/v \"valuename\" \/t REG_SZ \/d \"hello\" \/f<\/pre>\n
    \n
    <\/a>NSudo<\/h3>\n
    NSudo<\/a> (GitHub<\/a>) is a similar tool like PowerRun, but it can launch programs under System (LocalSystem<\/a>), Current User, Current Process, or the TrustedInstaller account.<\/p>\n
    \"nsudo<\/p>\n
    NSudo : Command-line support<\/h4>\n
    NSudo version 6.2.1812.31\r\n\r\n-U:<\/strong>[ Option ] Create a process with specified user option.\r\nAvailable options:\r\nT TrustedInstaller\r\nS System\r\nC Current User\r\nP Current Process\r\nD Current Process (Drop right)\r\nPS: This is a mandatory parameter.\r\n\r\n-P:<\/strong>[ Option ] Create a process with specified privilege option.\r\nAvailable options:\r\nE Enable All Privileges\r\nD Disable All Privileges\r\nPS: If you want to use the default privileges to create a process, please do \r\nnot include the \"-P\" parameter.\r\n\r\n-M:<\/strong>[ Option ] Create a process with specified Integrity Level option.\r\nAvailable options:\r\nS System\r\nH High\r\nM Medium\r\nL Low\r\nPS: If you want to use the default Integrity Level to create a process, please \r\ndo not include the \"-M\" parameter.\r\n\r\n-Priority:<\/strong>[ Option ] Create a process with specified [rocess priority option.\r\nAvailable options:\r\nIdle\r\nBelowNormal\r\nNormal\r\nAboveNormal\r\nHigh\r\nRealTime\r\nPS: If you want to use the default Process Priority to create a process, please\r\ndo not include the \"-Priority\" parameter.\r\n\r\n-ShowWindowMode:<\/strong>[ Option ] Create a process with a specified window mode option.\r\nAvailable options:\r\nShow\r\nHide\r\nMaximize\r\nMinimize\r\nPS: If you want to use the default window mode to create a process, please do \r\nnot include the \"-ShowWindowMode\" parameter.\r\n\r\n-Wait<\/strong> Make NSudo wait for the created process to end before exiting.\r\nPS: If you don't want to wait, please do not include the \"-Wait\" parameter.\r\n\r\n-CurrentDirectory:<\/strong>[ DirectoryPath ] Set the current directory for the process.\r\nPS: If you want to use the NSudo's current directory, please do not include the\r\n\"-CurrentDirectory\" parameter.\r\n\r\n-UseCurrentConsole<\/strong> Create a process with the current console window.\r\nPS: If you want to create a process with the new console window, please do not \r\ninclude the \"-UseCurrentConsole\" parameter.\r\n\r\n-Version<\/strong> Show version information of NSudo.\r\n\r\n-?<\/strong> Show this content.\r\n-H<\/strong> Show this content.\r\n-Help<\/strong> Show this content.\r\n\r\nContext Menu:\r\n-Install<\/strong> : Copy NSudo to the Windows directory and add the context menu.\r\n-Uninstall<\/strong> : Remove NSudo in the Windows directory and the context menu.\r\n\r\nPS:\r\n1. All NSudo command arguments is case-insensitive.\r\n2. You can use the \"\/\" or \"--\" override \"-\" and use the \"=\" override \":\" in\r\nthe command line parameters. For example, \"\/U:T\" and \"-U=T\" are \r\nequivalent.\r\n3. To ensure the best experience, NSudoC does not support context menu.\r\n<\/pre>\n
    Example:<\/strong><\/p>\n
    To run Command Prompt as TrustedInstaller, enable all privileges and the default Integrity Level:<\/p>\n
    NSudo -U:T -P:E cmd<\/strong><\/pre>\n
    \n
    <\/a>Process Hacker<\/h3>\n
    If you’re using the excellent Process Hacker<\/a> process manager program, you can launch a program as TrustedInstaller in two different ways:<\/p>\n
    Option 1:\u00a0Using built-in options<\/h4>\n
    In Process Hacker, click on the Services tab. Right-click the TrustedInstaller<\/strong> service and click Start<\/strong>.<\/p>\n
    \"run<\/p>\n
    Switch back to the Processes tab, right-click TrustedInstaller.exe<\/code>, click Miscellaneous<\/strong> and click Run as this user…<\/strong><\/p>\n
    \"run<\/p>\n
    Type the program you want to run as TrustedInstaller — e.g., Command Prompt (cmd.exe<\/code>), and click OK.<\/p>\n
    \"run<\/p>\n
    Note that the User name field reads NT AUTHORITY\\SYSTEM<\/code>. Also, when a program is launched under TrustedInstaller context, Task Manager or any process manager would show that it’s running as the SYSTEM user.<\/p>\n
    \"run<\/p>\n
    This is the case if you use any method in the above article. It’s normal and can be ignored. The spawned process runs with TrustedInstaller privileges although it says SYSTEM<\/strong>.<\/p>\n
    Option 2: Using a Plugin<\/h4>\n
    Downloading a Process Hacker plugin (.dll file) lets you run programs as TrustedInstaller via Process Hacker main menu.\u00a0Here are the Plugin download links:<\/p>\n
    TrustedInstallerPlugin_x32.zip<\/strong> (for 32-bit)\r\nhttps:\/\/wj32.org\/processhacker\/forums\/download\/file.php?id=795&sid=37bfe842abb595845e0663ae5b4da06b\r\n\r\nTrustedInstallerPlugin_x64.zip<\/strong> (for 64-bit)\r\nhttps:\/\/wj32.org\/processhacker\/forums\/download\/file.php?id=796&sid=37bfe842abb595845e0663ae5b4da06b\r\n\r\nSource code at GitHub:\r\nhttps:\/\/github.com\/processhacker\/plugins-extra\/tree\/master\/TrustedInstallerPlugin\r\n\r\n(via)\r\n\r\nTrustedInstaller - Process Hacker Forums:\r\nhttps:\/\/wj32.org\/processhacker\/forums\/viewtopic.php?t=2407<\/pre>\n
    After you copy TrustedInstallerPlugin.dll<\/code> to the Process Hacker\\Plugins<\/code> directory, close and reopen Process Hacker.<\/p>\n
    You’ll see the Run as trusted installer…<\/strong> command under the main menu.<\/p>\n
    \"run<\/p>\n
    \n
    <\/a>RunX from d7xTech<\/h3>\n
    RunX is a digitally signed executable that can launch any process with a Local System account or TrustedInstaller account privileges. It is also designed to optionally pass command line arguments to that app without having to open an admin Command Prompt window and navigate to the appropriate path first. It can also capture and display the program\u2019s exit code.<\/p>\n
    \"runx<\/p>\n
    The “Run inside CMD.EXE”<\/em> option will launch Command Prompt window first and launch the target program from there. That way you use the Command Prompt window to run subsequent commands under TrustedInstaller.<\/p>\n
    Download RunX and RunXcmd from:<\/p>\n
    New App: RunX and RunXcmd \u2013 d7xTech.com (formerly Foolish IT):\r\nhttps:\/\/www.d7xtech.com\/new-app-runx-and-runxcmd\/<\/pre>\n
    The package also includes a console version of the tool named\u00a0RunXcmd. It’s designed to do the above but for scripting purposes, when you need your script to wait on the process you are running to terminate, and\/or when you or your script needs to know the process exit code via %errorlevel%<\/code> output.<\/p>\n
    Here’s the list of command-line switches it supports:<\/p>\n
    Usage:\r\nRunXcmd.exe \/exec=\"[path\\file.exe]\" \/wait \/account=[user|system|ti] \/args=[]\r\n\r\nArguments:\r\n\/exec=\"[path\\file.exe]\" (Required; must be wrapped in quotes.)\r\n\/wait (Optional, Wait for the app to finish; useful in scripting.\r\nRunX also returns the \/exec file's exit code as it's own.)\r\n\/account=[user|system|ti]\r\n(Optional, Run as User(Non-Admin), System, or TrustedInstaller.\r\nIf this switch is not specified, TrustedInstaller is assumed.)\r\n\/args= (Optional, must be the LAST switch, everything after this is passed\r\nto the \/exec file. Do NOT wrap args in quotes, unless you intend for\r\nthe quotes to be passed to the \/exec file.)\r\n\r\nExample: (Run as Standard User with Arguments)\r\n\r\nRunXcmd.exe \/exec=\"c:\\path\\file.exe\" \/account=user \/args=\/Arg1 \/Arg2 \/Etc.\r\n\r\nExample: (Run as Trusted Installer and Wait\/Return Exit Code)\r\n\r\nRunXcmd.exe \/exec=\"c:\\path\\file.exe\" \/wait<\/pre>\n
    \n
    Closing Words<\/h3>\n
    Running programs under TrustedInstaller privileges can be risky, and you won’t need to do that in most cases<\/strong>, and as long as programs can access the necessary system files. This sort of elevation has to be used only when it’s necessary and if you know what you’re doing.<\/p>\n
    I’ve seen cases where TrustedInstaller incorrectly locked down specific system DLLs and the system itself couldn’t read the file, showing 0 KB in Explorer. Accessing the file properties and clicking the Security tab showed that the Permissions couldn’t be displayed. And ICACLS.EXE when running from Admin Command Prompt<\/a> couldn’t even see the file, as it said “The system cannot find the file specified. Successfully processed 0 files; Failed processing 1 files”.<\/p>\n
    Eventually, I had to use launch Command Prompt under Ti rights and then clear those files before running the System File Checker.<\/p>\n","protected":false},"excerpt":{"rendered":"
    Even when running programs elevated (Administrator), certain registry keys and files are not writable. This may be because the files are owned by TrustedInstaller, and no write access granted for Administrators. In that case, running the program as TrustedInstaller can help fix a locked registry key or clear a file that can’t be accessed anyway.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[6,7],"tags":[],"class_list":["post-3815","post","type-post","status-publish","format-standard","hentry","category-utilities","category-windows"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":80369,"url":"https:\/\/www.winhelponline.com\/blog\/import-reg-file-as-trustedinstaller\/","url_meta":{"origin":3815,"position":0},"title":"How to Import a .REG file as TrustedInstaller","author":"Ramesh","date":"March 1, 2026","format":false,"excerpt":"Certain registry keys are protected by NTFS permissions and are writable only by TrustedInstaller. In an earlier article, we saw how to launch a program under the TrustedInstaller privileges.\u00a0Let's see step by step how to import a REG file as TrustedInstaller. The benefit of using the TrustedInstaller privileges to modify\u2026","rel":"","context":"In "Utilities"","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"import .reg file as trustedinstaller","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2026\/03\/import-reg-trustedinstaller.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2026\/03\/import-reg-trustedinstaller.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2026\/03\/import-reg-trustedinstaller.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":74880,"url":"https:\/\/www.winhelponline.com\/blog\/mp3-metadata-blank-in-explorer\/","url_meta":{"origin":3815,"position":1},"title":"[Fix] MP3 Metadata not displayed in File Explorer","author":"Ramesh","date":"April 20, 2024","format":false,"excerpt":"When you open a folder containing MP3 files, the metadata fields in the Details view of File Explorer may be empty. For instance, the \"Title\", \"Contributing artists\", \"Album\" and other metadata columns may be blank. Even though the MP3 files have embedded metadata ID3 tags, they don't appear in the\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"mp3 metadata columns are empty in explorer","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/04\/mp3-meta-data-blank-explorer-fixed.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/04\/mp3-meta-data-blank-explorer-fixed.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/04\/mp3-meta-data-blank-explorer-fixed.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/04\/mp3-meta-data-blank-explorer-fixed.jpg?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":80107,"url":"https:\/\/www.winhelponline.com\/blog\/drive-properties-are-not-available\/","url_meta":{"origin":3815,"position":2},"title":"Drive Properties Error “The Properties for This Item Are Not Available\u201d","author":"Ramesh","date":"January 7, 2026","format":false,"excerpt":"When you right-click on a drive letter in This PC and click Properties, the properties dialog may not open, and the following error may appear: The Properties for This Item Are Not Available. Resolution The error \"The Properties for This Item Are Not Available\" occurs if the following registry key\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"drive properties page not available","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2026\/01\/drive_properties_error.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2026\/01\/drive_properties_error.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2026\/01\/drive_properties_error.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":10158,"url":"https:\/\/www.winhelponline.com\/blog\/run-program-as-system-localsystem-account-windows\/","url_meta":{"origin":3815,"position":3},"title":"How to Run a Program as SYSTEM (LocalSystem) Account in Windows","author":"Ramesh","date":"July 3, 2019","format":false,"excerpt":"Many Windows system files, registry keys, and services are owned by the SYSTEM (a.k.a LocalSystem) account, which has a high privilege level. If you need to modify a registry key owned by the SYSTEM account, there are at least two options. The first option that comes to your mind is\u2026","rel":"","context":"In "Utilities"","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"runx - run as system","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/runx-run-as-system.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":31967,"url":"https:\/\/www.winhelponline.com\/blog\/trustedinstaller-service-missing-error-3\/","url_meta":{"origin":3815,"position":4},"title":"Windows Modules Installer (TrustedInstaller) Service Missing or Throws Error 3","author":"Ramesh","date":"January 15, 2023","format":false,"excerpt":"When you open the Services MMC, the Windows Modules Installer Service (\"TrustedInstaller\") service may be missing from the list. On some systems, the Windows Modules Installer service may exist, but attempting to start the service causes error 3. Windows could not start the Windows Modules Installer service on Local Computer.\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"Regedit.exe File Import menu - Registry Editor","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/01\/regedit-file-import-menu.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":1129,"url":"https:\/\/www.winhelponline.com\/blog\/fix-w7-backup-restore-acronis-true-image\/","url_meta":{"origin":3815,"position":5},"title":"Fix Windows 7 Backup and Restore Not Launching After Uninstalling Acronis True Image","author":"Ramesh","date":"April 25, 2011","format":false,"excerpt":"Recently one of our readers faced a problem with Windows 7 Backup and Restore after installing and then uninstalling Acronis True Image. Nothing happened except for a brief hourglass when the user double-clicked the Backup and Restore item in the Control Panel. It turned out that the user had enabled\u2026","rel":"","context":"In "Windows 7"","block_context":{"text":"Windows 7","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-7\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/archived\/w7-bkp-acronis-1.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/3815","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=3815"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/3815\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=3815"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=3815"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=3815"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}