Выход седьмой версии ОС Windows ознаменовался для user extremely unpleasant event. Not only did a super-administrator appear in the system, so a new service related to security components called TrustedInstaller also appeared. What is this program, they understand not all users. Fill this gap by considering troubleshooting solutions in Windows 7 and higher.
TrustedInstaller: what is it?
As considered, the developers of operating systemsMicrosoft pays great attention to security. True, the main emphasis is not on protection against virus threats (although such elements are also present), but on the impossibility of changing system files, which can lead to a malfunction of the OS or even its complete failure. The TrustedInstaller component is responsible for this. What is it in the broadest sense?
Если говорить простым языком, данная the blocking service is something like a virtual user with administrator rights (not to be confused with a super administrator), which, due to the authority granted by the system, seems to take away from the user the right to modify critical system elements (files, folders, registry keys, etc.) .).
That is why when trying to commit anyactions with such objects are given messages that they are protected and to perform operations it is necessary to obtain permission from the TrustedInstaller service. What it is in terms of security is not difficult to understand. The user must have certain rights, without which interference with the operation of the system is simply impossible. Nevertheless, such restrictions can be circumvented quite easily.
Конечно, удалить саму службу или отвечающий за ее Running the executable file, which is located in the servicing directory of the Windows root folder, is not possible due to the current policy and the protection installed: the TrustedInstaller.exe file is protected from renaming, copying, moving, deleting, and spoofing. But you can give yourself the necessary permissions to conduct the above operations.
How to get permission from TrustedInstaller for operations with folders and files?
Рассмотрим общий случай.First you need to select an object with which you intend to perform any actions blocked by this service (we assume that TrustedInstaller does not allow deleting a folder or file).
Right click on the object in the usual "Explorer"call the drop-down menu and go to the property bar. In the new window, go to the security tab and to change the settings, use the "Advanced" button.
After this, once again choose additionalparameters where we need the "Owner" tab. By default, the corresponding field is TrustedInstaller. We change the owner to the administrator group and confirm the changes made.
Now another aspect associated with the componentTrustedInstaller. How to delete files of the system type or a regular object blocked by the service? For this you need to make additional settings. We return to the security section, but now select the admin group and use the privilege change button.
In the permissions window that appears on the right in the firstcolumn “birds” on all items in the list, and then confirm the changes again with the “OK” button. Rights obtained, and with the selected object, you can easily work as with a regular file or a standard folder that is not protected.
Note:such a method implies the choice of changing the rights for only one specifically selected object. Mass receiving the necessary privileges is not provided. By the way, exactly the same actions can be performed by the registry branches, by calling the corresponding menus on each of those for which you intend to set full access rights.
Possible problems with the consumption of system resources
Very often, users complain thatthe service running in the background consumes too much system resources. In part, this may be due to two reasons: the consequences of virus infection and the active automatic updating of the system.
Хотя и считается, что исполняемый файл службы TrustedInstaller is protected very reliably, some threats still find security holes. First you should look at the processes in the Task Manager (there may be several of the same name). The active process without the signature of the publisher or developer, apparently, is the very virus disguised as the original service.
We check the system for viruses
It is best to clean the system with the help of third-party portable applications, and not with the established anti-virus software.
Ideally, discs should be used best.utilities that have a common name Rescue Disk. Their own interface can be loaded from optical media or a regular flash drive even before the initial start of the operating system, and then perform a deep scan. Such programs can detect threats that are deeply entrenched, even if they are in the form of processes loaded into memory.
Turning off the system update
When the system is updated, the TrustedInstaller service is also activated, checking the components to be installed for originality.
If there is too much loadauto update can be disabled. This is done in the corresponding section of the “Control Panel”. After this process will not be activated. However, it is worth noting that when you try to search for available updates and integrate them into the system manually, the service will start again, no matter how hard the user tries to turn it off.
Should I turn off the TrustedInstaller service?
Finally, another important questionregarding the advisability of disabling the TrustedInstaller service. What is this in terms of security and what can a component deactivate? Everything is simple here. The user with his inept actions can accidentally delete or change the system component, which is fraught with complete system crash. So disable this component is not recommended.
Necessary deactivation of TrustedInstaller can beName it only in the situation when specialized software is installed on the computer, which will not work without obtaining rights to change the system components. But there are not so many such programs, and an ordinary user is unlikely to install them.
