Quick fix: You can’t set per-app UAC levels via Settings, but you can create a Task Scheduler entry that runs the specific tool with highest privileges — then make a desktop shortcut that triggers the task. The tool launches elevated without a UAC prompt, while system-wide UAC stays intact for everything else. You have an … Read more
Quick fix: Open Settings → Accounts → Other users → [local account] → Change account type → Administrator. If the account is the only one on the PC and you can’t change its type from itself, boot to Safe Mode and use the built-in Administrator account, or run net localgroup administrators <username> /add from an … Read more
Quick fix: Open tpm.msc, click Take Ownership of the TPM if it’s available, and choose a TPM owner password during the process. On modern firmware (TPM 2.0), the password is auto-generated and managed by Windows — you can’t set a custom one but you can store the owner authorization file with manage-bde. A TPM owner … Read more
Quick fix: Tamper Protection refuses to turn off when an Intune policy, Defender for Endpoint, or Family Safety has it locked at the cloud or organization level. Sign out of work accounts under Settings → Accounts → Access work or school, or contact your IT admin — local toggles can’t override a managed setting. You … Read more
Quick fix: Open Windows Security → Virus & threat protection → Manage settings, toggle Tamper Protection to Off temporarily. Run your legitimate tool (security scanner, AV vendor uninstaller, debugger). Re-enable Tamper Protection after. You’re running a legitimate security tool — Sysinternals utility, third-party antivirus uninstaller, system diagnostic — and it fails. The tool reports it … Read more
Quick fix: Open Windows Security → Virus & threat protection → Manage settings. Toggle Real-time protection Off. Windows automatically re-enables it after a brief idle period (usually 15 minutes) — so this is genuinely temporary and self-healing. You need to install legacy software, run a security tool, or work with a file Defender is mis-quarantining. … Read more
Quick fix: Open Terminal (Admin) and run "%ProgramFiles%\Windows Defender\MpCmdRun.exe" -SignatureUpdate. This forces a direct definition download from Microsoft, bypassing Windows Update infrastructure. If still failing, also run -RemoveDefinitions -All first to reset. Microsoft Defender shows “Security intelligence is out of date” or definition updates fail with error codes. Real-time protection is on but threat signatures … Read more
Quick fix: Open Windows Security → Virus & threat protection → Scan options, choose Microsoft Defender Antivirus (offline scan), click Scan now. The PC reboots into a minimal environment for the scan, then returns to Windows. You suspect malware that hides while Windows is running — rootkits, bootkits, or sophisticated persistence mechanisms. Standard scans can’t … Read more
Quick fix: Open Windows Security → App & browser control → Smart App Control settings. If currently On, you can only switch it to Off — it can’t be turned back to On without reinstalling Windows. Once Off, custom scripts run without blocks. Smart App Control (SAC) blocks unsigned or low-reputation apps. Your custom PowerShell … Read more
Quick fix: Once Smart App Control is set to Off, Windows blocks toggling it back to On until a clean install. Workaround: edit registry HKLM\SYSTEM\CurrentControlSet\Control\CI\Policy → VerifiedAndReputablePolicyState = 1, then reboot — SAC re-enables in evaluation mode without reinstall. Smart App Control (SAC) is Windows 11’s app-reputation layer that blocks untrusted EXE files. It runs … Read more