Random Windows 11 Permissions Malarkey (?)


Timbo128

Active member
Member
Local time
3:50 PM
Posts
56
OS
Windows 11 Pro 25H2 OS Build 26200.7705
Good mornin', Everyone.....

Welp, 5 Windows iterations ago (once upon a time in the Land of Windows 7), we felt that we had a good grasp on the
foundational architecture of Microsoft Windows OS and seemingly fluid changes from version to version (XP>7 et al.).......

EHHHHH!!!!.....(loud buzzer sound)......WRONG!!!......

We simply had a love affair with Windows 7 Professional x64, and thus said, we skipped right over the Vista-esque (IMO)
8/8.1 versions, and didn't even give Windows 10 a nod. Soooo, here we are. Thee ol' Windows 7 machine justa hummin'
along like a loyal and faithful Small Block Chevrolet snappin' through this Windows 11 Pro as though the 'antiquated'
hardware was of no concern (knock-knock...on wood!)

Yeah, we had some glitches along the way with the clean 24H2 install on a fresh SSD, but with each subsequent Update
everything seems to be gettin' better, smoother, and of a more fluid nature.

And now, we've arrived at this new puzzler...... First off, perhaps due to the exuberance of the install violating the bs Microsoft
Hardware Requirements and basically functioning beyond our own expectations, we scuffed up and created a Microsoft Account
thinking they had everything rigged whereas nothing would work properly without the barrel of the Microsoft gun to my head....
Capisce?..... Once the excitement waned, we set up a Local Account (Administrator) in me own name, attempted to
dislodge ourself from the big government grip of Microsoft control. Well, somethin' in me thought process apparently went awry.

Last night, finally, the bulb lit up......after jumpin' through a sundry of Microsoft hoops (log in, log out, forgot main Microsoft admin pw)
we were able to disassociate THIS PC, along with the telltale info exposing the 'antiquated' unblessed Microsoft hardware bs, and
shut the reliance down on that main Microsoft acct....so we thought. Promptly we were greeted with a notice that it could take
~24 hrs. for the changes to take effect........Sooooo, now, we're so spun that we're not sure what's going on!

The problem?.....even though we 'thought' our Local Account awarded Full Administrative Privileges, apparently that's not
the case....... in any event, we've put together some screenshots, marked up, to present here with the hope one of you more
than capable Windows Wizards can help me get sorted out. And THAT, would be most greatly appreciated!.....read on, por favor-

Somehow, I've things mixed up..... All I wanted to do was clean stuff up around here a bit and decided to broom the old
Defender Scan History into the trash. Wanted to make sure we did it right, so we looked in C:\Windows\Microsoft Antimalware\
Support directory, and, after browsing about therein, had planned on brooming everything in there. Ding-ding, not a good idea
said the voice in my left ear.....research time..... we discovered the proper way was NOT within above directory, but rather
C:\ProgramData\Microsoft\Windows Defender\Scans\History......Yee-up!......and FINALLY!.....we've arrived at my dilemma!....

We were stopped in our tracks with-

Screenshot 2025-10-31 084839.webp

OK, no problem!...... Then THIS!-

Screenshot 2025-10-31 085124.webp

Off to the Security tab we go......

Screenshot 2025-10-31 085402.webp

>Advanced.......

Screenshot 2025-10-31 085548.webp

Need READ Permissions...... CONTINUE.....

Screenshot 2025-10-31 090213.webp

Dbl. click on 'Administrators (TIMBO-PC\Administrators), Access- FULL CONTROL> Show Advanced Permissions>

Screenshot 2025-10-31 090503.webp

AAAND!......I'm stumped!.....everything's greyed out!.....Couldn't change 'Owner' in pane 3 screens prior, either.....


Now, here's something else......going to Control Panel>User Accounts>

Screenshot 2025-10-31 091755.webp

And>

Screenshot 2025-10-31 091944.webp

WHAT am I missing?.....Configure advanced user profile properties?....Change your acct type?.....
But, watch what happens there......

Screenshot 2025-10-31 075106.webp
>>>>>>
Mod.webp

Can't change from Standard to Administrator...... Ok, let's scoot on over to Settings>Accounts and have a look-see......
NOTE!: upper left hand corner displays my legal name and email (along with gorgeous photo of me beloved Toon Bot, Layla),
which is my Microsoft account nomenclature, and under Accounts>Your Info my Local Acct is displayed.....

Screenshot 2025-10-31 092712.webp

Not sure how to put this, exactly, but there appears to be some sort of a CONFLICT going on here, perhaps......

I hope we've provided enough information here whereas to garner some much needed help......Simply put,
I absolutely hate it when I'm not in complete control of my personal world. Very good chance, too, that I'm
missing something here- obviously brought on by mine own self imposed frustration......

Could someone(s) please school me as to what's going on here?.......PLEASE?......
In advance, we offer the most heartfelt gratitude and thanks for any and all help......

ThankYou-ThankYou, Kind Regards, and wishing ALL a great day out there in Windows World. 😊


pouting_kid.webp


AND PLEASE!..... Don't try and fix ME, just my Windows 11.......


FixStupid2.webp
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2 OS Build 26200.7705
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP ENVY 700-515xt CTO (mATX platform)
    CPU
    Gen 5 Haswell i7-4770
    Motherboard
    OEM (Asus)
    Memory
    32 GB G. SKILL DDR-3 Ripjaws X- 8GB x 4
    Graphics Card(s)
    Integrated Intel 4600 (112MB)
    Sound Card
    OEM
    Monitor(s) Displays
    HP 27eb
    Screen Resolution
    1920 x 1080
    Hard Drives
    Samsung 860 PRO 256GB, SG ST1000DM003-1CH162, Barracuda 7200.14 Series, 1 TB storage, 64MB cache and a SATA 6Gb/s interface (Hard drive is used for Storage only)
    PSU
    OEM 350W
    Case
    OEM
    Cooling
    OEM (ACPI fans)
    Keyboard
    Logitech K120
    Mouse
    Logitech M100
    Internet Speed
    440.1 Down/ 11.2 Up, 13 ms latency, server based in Chicago, IP- Spectrum in Midland, MI
    Browser
    Google Chrome
    Antivirus
    MS Defender
If you could easily override the security on those folders, malware could too. And note that your account already is an "Administrator". That's why the option to change to type "Administrator" is greyed out.

An Administrator account is still subject to UAC (unless you turn that off)) and it doesn't give you SYSTEM level access or TrustedInstaller service level access. And even the SYSTEM account, elevated to TrustedInstaller level, cannot override a PPL-Windows trust label. There are some things that are kernel-level locked down. Blame the bad actors out there for these extra levels of security.

Anyhow, you can use this script to clear your Defender history:

Or you can use the following tool set which also includes an option to clear Defender History along with many other handy tools, such as options to open Cmd, PowerShell, RegEdit, or a file manager with TrustedInstaller access.
 
Last edited:

My Computer

System One

  • OS
    Windows 10/11
    Computer type
    Laptop
    Manufacturer/Model
    Acer
10 points to @LesFerch just for getting through all that.
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel NUC12WSHi7
    CPU
    12th Gen Core i7-1260P
    Motherboard
    NUC12WSBi7
    Memory
    64 GB Micron PC4-25600
    Graphics Card(s)
    Intel Iris Xe Graphics
    Sound Card
    on-board Realtek HD Audio
    Monitor(s) Displays
    Dell U3219Q
    Screen Resolution
    3840 x 2160
    Hard Drives
    Samsung SSD 990 PRO 1TB
    Crucial MX500 2 TB
    Antivirus
    Microsoft Defender

Latest Support Threads

Back
Top Bottom