I'm unable to add the user, ALL RESTRICTED APPLICATION PACKAGES, to the permissions list on a folder that was created in Windows 10. How can this be done using Windows Explorer (Security ——> Advanced)?

  • Why did you want to add this permission to a folder? Which folder? – Waka Apr 3 '18 at 2:22
  • The reason being I wanted to define a new "spools" folder that has the exact same permissions as the default one in C:\Windows\System32. This might not be possible, after all. – Guy Mann Apr 3 '18 at 12:51

This is special system group that used for UWP apps. It's not available for general users to edit to add or remove it to folder or files. It's defined by system itself.

| improve this answer | |

It appears to be impossible to add ALL RESTRICTED APPLICATION PACKAGES via Windows Explorer, but this can easily be achieved via a little PowerShell:

$user = [Security.Principal.NTAccount]::new("ALL RESTRICTED APPLICATION PACKAGES").Translate([System.Security.Principal.SecurityIdentifier])
$rule = [Security.AccessControl.FileSystemAccessRule]::new($user, "ReadAndExecute", "Allow") # or whatever permissions you require, you can change them later via Explorer
$directory = "path/to/your/directory"
$acl = Get-Acl $directory
Set-Acl -Path $directory -AclObject $acl

However, for your case - wanting to bulk copy the permissions from one directory to another - you're better off, well, copying the permissions, instead of trying to add them manually. For that task you can use the Copy-Acl PowerShell script:

Copy-ACL -SourcePath "C:\Windows\System32\spool" -DestinationPath "my_new_spool_directory_location" -BreakInheritance -KeepInherited
| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.