How do I perform IT dept or administrator functions?

Question

Especially when working settings I get things the system administrator or IT department have to do. How do I, as just owner of the PC, get those done?

[Moderator's note: Tag moved from: Microsoft System Center | Other]

Answer 1

PII caution: Please note that this is a public forum for users. Do not post any sensitive or private information here for your privacy and security.

---

Good day Larry McManus!

Thank you for reaching out. Based on what you shared, I see you’re encountering restrictions that typically require administrator or IT‑level permissions and you’re looking for a way to perform these actions on your own as the owner of the PC.

Before giving any suggestions, please clarify the following information to better identify the situation

1. Which Windows edition is installed on this PC (Home, Pro, Enterprise, Education)?

2. Is this PC connected to a work or school account?

If a work/school account is connected, Windows may enforce IT policies even on a personal PC.

To check this:

• Open Settings > Go to Accounts > Access work or school
• See if any account shows Connected or Managed

3. Does your account show “Administrator” as the account type?

• To check this: Open Settings > Accounts > Your info
• Look under your name for Administrator

Note: A standard user cannot change system or policy‑level settings.

4. Do you see messages like “Some settings are managed by your organization” anywhere in Settings? (this message confirms active policy enforcement)

Where to check: Settings > Windows Update > Settings > Privacy & security

I look forward to your details so we could determine the best next steps!

Yours sincerely.

Answer 2

The message “The system administrator has set policies to prevent this installation” means Windows is applying administrative or device‑management policies that block the action. On a home PC, these policies typically come from one of two places:

1. Local Group Policy (configured on the PC itself)
2. Device management by an organization (work/school account, Intune, or similar)

To change these, administrative tools must be used.

1. Check whether the PC is managed by an organization

• If a work or school account was added and device management was accepted, the IT department can enforce policies that block installs, configure settings, and enforce security rules.
• A device management solution lets IT manage security settings, deploy software, and enforce policies on the device.
• If device management is enabled through a work/school account, only the organization’s administrator can change those policies. In that case, contact the organization’s IT admin to request changes.

2. Use Local Group Policy Editor on non‑managed PCs If the PC is not joined to a domain or managed by an organization, and it is running an edition that includes Local Group Policy Editor (not Windows Home), policies can be changed locally:

• Open the Local Group Policy Editor using one of these methods:
  • Search for “Edit group policy” in the Start menu, or
  • Press Windows key + R, type gpedit.msc, and press Enter.
• In Local Group Policy Editor, an administrator can configure or remove restrictions that block software installation or other actions.
• Changes here affect only this PC and should be made carefully, because incorrect settings can significantly affect operation.

3. When only a local account exists and the PC is not managed

• Sign in with an account that has local administrator rights.
• Use Local Group Policy Editor (if available) or other admin tools (like Advanced System Settings) to adjust configuration.
• If Local Group Policy Editor is not available (for example, on Windows Home), and no organization is managing the device, the restriction may have been set by other security software; that software’s settings must be changed using its own interface.

In summary, to “do what the IT department does,” the account must have local administrator rights, and either:

• The device must not be managed by a work/school organization (otherwise only that organization’s IT can change policies), and
• Administrative tools such as Local Group Policy Editor must be used to change or remove the policies that block installations.

---

References:

• Add Your Work or School Account to a Windows Device
• System Configuration Tools in Windows