In Windows 10, you will get a pop up box when you try to open one of the store applications like Edge, Store, ect. It will say “this app can’t open by the built in administrator account” even if you are a domain user with local admin rights to your machine.
- Run – Regedit – Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
a. Look for a key called “FilterAdministratorToken” and delete it. Note that is is set to “0” by default (disabled but we want it “undefined”) and controls a Group Policy setting we will see later.
While at this location, look for a key called “EnableLUA” and make sure it is set to “1”. Many admins will set this to 0 to disable UAC, but it seems to break the OS – so set to 1.
Now run – C:\WINDOWS\System32\UserAccountControlSettings.exe – Slide the bar down to “never notify”
Run – gpedit.msc – Navigate to: ComputerConfig\Windows Settings\Security Settings\Local Policies\Security Options
a. Find “User Account Control: Behavior of the elevation prompt” and set it to “Elevate without prompting..”
b. Find “User Account Control: Admin Approval Mode for the Built-In Administrator Account” and set it to “Enabled”
- Reboot, done.
NOTE: DO NOT DO THIS TO END USER’S MACHINES!! Just do this to your or your home computer. End users need UAC and limited permissions to protect themselves from themselves!