Some Windows registry keys cannot be modified without additional administrator action. The reason is the lack of rights of the local Administrators group to edit certain registry keys, where the owner is System or TrustedInstaller. TrustedInstaller is a service that is responsible not only for installing various software components of the Windows 11 operating system but also for securing access to system files, protecting certain Windows objects from unauthorized changes.
Like System, TrustedInstaller can own certain registry keys. And one of the ways to edit the registry is to change the owner of the section and assign full rights to it.
Configuring Windows 11 for the subsequent change of the owner of the registry key
To be able to change the ownership of a registry key to edit the settings later, you must disable the Real-Time Protection and Anti-Counterfeiting features
- Open Options
- Go to Privacy & Security> Windows Security
- In the Protection scopes section, select Virus and threat protection
- In the Protection against viruses and other threats section, select Manage settings
- Disable Real-time protection and Anti-tampering options
Ways to open Registry Editor in MS Windows 11
- In the search bar, enter regedit, in the results select Registry Editor
- Right-click on the Start> Run button. In the Run window, enter regedit and click OK
- From the Start menu, select All Apps> Windows Tools> Registry Editor
Change the ownership of a registry key to gain full access
- Right-click on the required registry key
- In the context menu, select Permissions >>
- In the opened window Permissions for the group >> select Advanced
- In the Advanced Security Settings for >> window, in the Owner area, click the Change button
- In the Select: “User” or “Group” window, click the Advanced button
- Click the Search button
- In the Search Results area, select the Administrators group and click OK
- Press the OK button
- If the system does not allow a new owner to be established, check if the Real-time Protection and Anti-Counterfeiting features are disabled.
- To replace the owner of all child objects of a section, select the checkboxes Replace owner of subcontainers and objects, and also Replace all child object permission records inherited from this object.
- In the Permissions for the group >> window, select the Administrators group and check the box in the Full Control checkbox.
- After the changes have been made, you can make changes to the registry. To avoid compromising security, after making changes, you must restore the original rights and the owner of the registry key.