How to Fix “Access Denied” on a Windows 10 Administrator Account

If Windows 10 says Access denied even though your account is an administrator, the problem is usually not the account itself. User Account Control (UAC) may be running the app with a standard token, the file may have restrictive NTFS permissions or a different owner, or Windows Security may be blocking an app from changing protected folders. Start with the fix that matches where the error appears.

Do not disable UAC or your antivirus just to get past the message. Microsoft explains that administrator accounts normally run apps with a standard user token until an operation is elevated. That behavior is part of User Account Control, not a sign that your administrator account is broken.

1. Run the affected app as administrator

If the error appears only inside one program—for example, when an installer, terminal, or utility tries to write to a protected location—elevate that program instead of changing folder ownership.

1. Open Start and search for the app.
2. Right-click it and choose Run as administrator.
3. Approve the UAC prompt.
4. Repeat the action that previously failed.

If that works, the app needed an elevated administrator token. Avoid configuring everyday apps to run elevated permanently unless the software genuinely requires it.

2. Check the file or folder permissions and owner

If File Explorer itself says you do not have permission to open, modify, rename, or delete an item, inspect its access control list.

1. Right-click the file or folder and select Properties.
2. Open the Security tab and select your account or the Administrators group.
3. If the required permission is missing, select Edit and grant only the access you need.
4. For an ownership problem, select Advanced, then Change beside Owner. Enter your account name, choose Check Names, and apply the change.
5. For a folder you own, apply the change to child items only when you intend to change the whole folder tree.

Be cautious with protected Windows locations. Ownership by TrustedInstaller or SYSTEM is often intentional. Do not take ownership of Windows system folders simply to silence an error.

3. Use takeown and icacls for a stubborn folder

If the graphical permissions dialog cannot repair access to a folder that belongs to you, Windows includes command-line tools for ownership and ACLs. Open Command Prompt as administrator, replace the example path with the real folder, then run:

takeown /f "C:\Example\Folder" /r /d Y
icacls "C:\Example\Folder" /grant "%USERNAME%":F /t

takeown makes the current administrator the owner; it does not automatically grant every permission. icacls modifies the discretionary access control list. Microsoft documents both takeown and icacls for Windows 10.

Use recursive switches only when you really want to change all child items. For a single file, target that file instead of an entire directory tree.

4. If an app cannot save files, check Controlled folder access

Microsoft Defender can intentionally block an untrusted app from changing protected folders. If the message appears when a known program tries to save or modify a file, check Windows Security before altering NTFS permissions.

1. Open Windows Security.
2. Go to Virus & threat protection.
3. Open Manage ransomware protection.
4. If Controlled folder access is enabled, review the block history and choose Allow an app through Controlled folder access for a program you trust.

Microsoft recommends allowing only apps you recognize. Turning the protection off—or disabling Defender entirely—removes a security layer and is not a good general fix. See Microsoft’s Windows Security guidance for the current behavior.

If Access denied still appears

• Check for EFS encryption. In Properties > Advanced, a selected Encrypt contents to secure data option means the file is protected with Encrypting File System. Ownership and administrator rights do not replace the required decryption certificate or recovery key. Microsoft’s EFS documentation notes that file encryption is not available in Windows Home editions.
• Consider device policy. On a work- or school-managed PC, Group Policy, security software, or organizational permissions may deliberately prevent changes even for a local administrator. Contact the administrator responsible for the device rather than bypassing policy.
• Avoid “Never notify” UAC advice. Lowering UAC does not repair an NTFS ACL or restore an encryption key, and Microsoft warns that disabling Admin Approval Mode reduces operating-system security.

Windows 10 reached end of support on October 14, 2025. Microsoft recommends moving to Windows 11 when possible, or using the Windows 10 Extended Security Updates program on eligible devices that must remain on Windows 10. See Microsoft’s Windows 10 support notice for current options.