


As an example, TrustedInstaller owns Notepad.exe so even an administrator cannot delete or move the file and will receive a “File Access Denied” error. If TrustedInstaller is the owner of an object with full control over it, an administrator cannot do anything without transferring control to the administrators group, whether the file is locked and in use or not. But Windows doesn’t work like that and there are additional levels of access and security that go over and above even what an administrator can do.įor instance, TrustedInstaller is an account created by Windows that has exclusive control over a number of system files and folders. A standard user account has some restrictions while an administrator should have pretty much complete control over the whole system. Most Windows users would know that there are two main types of user account for individuals, a standard user account and an administrator account.
