How to restore TrustedInstaller as owner for system files on Windows 10

By published

Did you change ownership of a system file? Use this guide to restore the original TrustedInstaller built-in user account as the rightful owner of the file on Windows 10.

If you're like most tech-savvy users, you don't settle for default configurations. You're always looking for ways to customize your system to improve productivity or to make your PC more unique.

Sometimes, to customize the operating system, in this case Windows 10, you need to modify some system files. When you need to do this, it often requires taking full control of certain files, which involves removing the special built-in "TrustedInstaller" user account as the owner of the file and granting your account full access.

However, later on, you may want to restore the original permission settings to the system file, but there is not an option to do that on Windows 10. In addition, if this isn't something you do every day, you'll probably forget what the original settings were.

In this Windows 10 guide, we'll walk you through the steps to restore ownership of system files to the TrustedInstaller built-in user account.

How to restore TrustedInstaller ownership to system files

  1. Open File Explorer.
  2. Browse to the system file you previously changed ownership.
  3. Right-click the file, and select Properties.
  4. Click on the Security tab.
  5. Click the Advanced button.

  1. On the "Advanced Security Settings" page, click the Change link on Owner.

  1. On the "Select User or Group" page, type the following to add the TrustedInstaller account and click Check Names:NT Service\TrustedInstaller
  2. Click OK.

  1. Click Apply.
  2. Click OK again to complete the task.

These steps now restored the ownership of the file to the built-in TrustedInstaller.

Keep in mind that this works for system files as well as for system folders. Also, don't forget to check the "Replace owner on the subcontainers and objects" and "Replace all child object permission entries with inheritable permission entries from this object" options, if you previously changed these settings on system folders.

Finally, if you granted yourself full control to the system file, you may also want to remove these settings as well, and to do that you can use the following steps:

  1. Right-click the system file, and select Properties.
  2. Click on the Security tab.
  3. Click the Advanced button.
  4. On the "Advanced Security Settings" page select your account.
  5. Click Remove.

  1. Click Apply.
  2. Click OK to complete the task.

More Windows 10 resources

For more help articles, coverage, and answers on Windows 10, you can visit the following resources:

Mauro Huculak
Mauro Huculak

Mauro Huculak is technical writer for WindowsCentral.com. His primary focus is to write comprehensive how-tos to help users get the most out of Windows 10 and its many related technologies. He has an IT background with professional certifications from Microsoft, Cisco, and CompTIA, and he's a recognized member of the Microsoft MVP community.
7 Comments
  • Very detailed as usual.
  • I was wondering if you'd publish something like this after the ownership shortcut article from a couple of days back. :-)
  • How about a blanket way to restore all of the files to their default ownership?
  • Yep, great idea. I've seen instructions on how to 'reset' permissions and ownerships but that just means zero them to something bland.
    Default, original, status would make an excellent article.
  • Great, another way to mess up permissions ;)   But serisouly.. anyone who should be changing file ownership is competent enough to find this stuff out and likely knows it. Most people should not touch permissions or ownership...
  • I agree. I can't fault the writing of Mauro in that he definitely explains things clearly and if somebody were to follow his steps it would be pretty easy, I just don't agree that the type of person this site targets should be doing 90% of what he posts.
    There's already better places to get this info in support communities where people with expertise will be responsive and help - Good luck getting this sort of help in the WC comments section if something goes horribly wrong, a LOT of people that post here just won't or can't have a proper discussion.
  • Thanks! I was trying to add TrustedInstaller again but i just typed in TrustedInstaller in the field and of course that didn't work. And, searching for it it won't be in the list. But nt service\trustedinstaller does. Thanks Microsoft.