reset user permissions/local policy (after failed update to 21H2)

Question

After not upgrading my home Windows for quite a time, yesterday I tried starting 21H2 upgrade.

3 hours of blue background counter, it said that there was a failure with error code, which has no specific description in MSDN.

But the problem is not in that.

After the setup has rolled back, I got my user profile permissions damaged, and system tools starting with a 5 sec. lag.

in details:

• starting Task Manager takes 5 seconds.
• starting most "elevated" programs takes 5 sec.
• starting language config applet is fast, but any change takes 5-15 seconds.
• starting elevated console (CTRL+SHIFT "cmd") takes around 5 seconds.
• starting mmc results in a red message "your administrator has disabled permissions to launch mmc blah-blah-blah...."
• this implies restriction to start Event Viewer, and Group Policy tools.

-I also found that there are no system restore points... but that may be my miss. Reducing the restore space, and writing too much data on the disk after that may caused failure to create restore points. maybe. or maybe they were deleted during failed upgrade, or simply inaccessible.

- Windows update says "some functions were restricted by the administrator". I am the administrator, but that could be a result of disabling spontaneous and uncontrolled updates in the past.

The inspiring thing is that:

I can launch everything from the elevated console.

dism and sfc check-ups finish with no errors

So please, do not reply with the canned answers.

It seems that Windows itself is fine, but the user account permissions were damaged.

The user account is of the admin group, created during the initial installation.

1)Is there a safe and reliable way of resetting the user account permissions, without loosing data, installed software configs, registrations and passwords?

2)Is there a safe and reliable way of resetting the local group policy, without loosing data, installed software configs, registrations and passwords?

Answer 1

Hi Hale. I'm Greg, 10 years awarded Windows MVP, specializing in Installation, Performance, Troubleshooting and Activation, here to help you.

System Restore points are wiped out by Feature Updates, so make sure System Restore is enabled for C and any other drives you want:

https://www.windowscentral.com/how-use-system-r...

There is no group policy in Home version. Resetting Account permissions to default in Windows 10 is here:

https://www.thewindowsclub.com/how-to-reset-fil...

However the Admin error you're getting in Home version indicates account corruption. You can Test for account corruption by creating a new Local Admin account to see if the problem goes away. Step-by-step instructions here:

https://www.isumsoft.com/windows-10/3-ways-to-c...

Sign into the new account, test it works correctly, if so move files over, test all apps work or reinstall any that don't. Then when ready delete the old account in Settings > Accounts > Family & Other Users.

You can also try to Repair the old account by running a Repair Install from the new account, steps here: https://www.tomshardware.com/how-to/fix-windows...

You can change it to your Microsoft account if desired:

https://www.tenforums.com/tutorials/5375-switch...

Based on the results you post back I may have other suggestions if necessary.

______________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.

Answer 2

Hi Greg!

Thank you for taking it directly to the point.

>However the Admin error you're getting in Home version

I have Pro license upgraded.

So it is Admin, exactly how it should be.

But some restrictions got applied to the active user, which are not present under elevated console.

I would create another user, but that implies total migration at the same level as a clean install; which I want to avoid.

>You can also try to Repair the old account by running a Repair Install from

That is exactly the procedure, which failed and caused all the havoc.

I tried updating the Windows version, it failed, and I got to this, unable even to fall back with the System Restore.

Answer 3

Had you done the Pro Upgrade earlier? Have you applied Group Policies?

Reset Group Policy to defaults: https://www.windowscentral.com/how-reset-local-group-policy-objects-their-default-settings-windows-10

The "restrictions" applied to the user with Admin errors are almost always indicative of Account corruption, I handle a dozen of these cases a day since before Windows 10 was even released, after almost never seeing it in forums during Windows 7.

Go ahead and test a new Local Account to see for sure.

The Repair Install needs to be run from the new and uncorrupted account.

Answer 4

What's wrong with 21H2 ? Is it license level dependent?

I have Win10 Pro license. Local account management. No specific policies beyond standard configuration.

I had 19041(2004) which was running fine, but after reading about End of Support, I downloaded the 21H2 update tool (the one used for cleaning update in your previous post)

And I got this...

I guess, some damage in the form of temporary applied account restrictions, or incompatible restrictions profile happened during update, which did not roll back.

So, is there a tool to reset local policies, and per-user restrictions?

>after almost never seeing it in forums during Windows 7

Yes I loved it for reliability... But win7 is incompatible with ultra-HD screens....

Answer 5

I was responding to your originally saying you have Home version and wondered if you were doing the Pro Upgrade at the same time.

Normally running the Upgrade manually is the most stable method and the roll back is problem-free. There may have been underlying corruption in the install or account that sent it sideways. I've given you the best things to try first that will answer these questions.

There are additional steps here for Overcoming Version Upgrade Failures: http://answers.microsoft.com/en-us/windows/wiki/windows_10-windows_install/overcoming-windows-10-upgrade-failures/682df9cf-aecf-4d52-8df7-19e9f8dba4cc

In addition, when was the last Clean Install? What we have found is that in Windows 10 what matters most is the quality of the underlying install, the same reason enthusiasts have never run Factory or Upgrade installs because they know there would be endless issues.

For example there have been zero return problems by those who follow the gold standard Clean Install here: http://answers.microsoft.com/en-us/windows/wiki.... It is a better install than any amount of money could buy and a great learning experience that will make you permanently the master of your PC because you will know what works best and have applied it with your own hands. So when you get time I'd study over that to see if it's something I can help you do.