Solutions Enabler executable file fails when run with the local integrated admin account on Windows 10 2016
Summary: Solutions Enabler (SE) executable fails when run with the local integrated admin account on Windows.
Symptoms
Right clicking the executable file to install Solutions Enabler does not generate a display window, but fails with the following error in the event log:
Log Name: Application Source: Microsoft-Windows-Immersive-Shell Date: 12/1/2022 11:03:34 AM Event ID: 5973 Task Category: (5973) Level: Error Keywords: User: ComputerName\User Computer: ComputerName Description: Activation of app Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy:App.AppXc99k5qnnsvxj5szemm7fp3g7y08we5vm.mca failed with error: This app can't be activated by the Built-in Administrator. See the Microsoft-Windows-TWinUI/Operational log for additional information
This fails with the local integrated admin account.
However, it does run using the Lightweight Directory Access Protocol (LDAP) admin account. This method should not be used for security reasons. Running the SE 9.x install executable works.
Cause
This is an issue specific to the integrated administrator account on some Windows versions. User Account Control (UAC) Admin Approval Mode is a security setting that makes the built-in Windows Administrator account behave like a standard user, requiring a separate approval prompt to perform administrative tasks. When enabled, users with admin rights see a prompt asking to approve or deny actions requiring elevated privileges, providing an extra layer of security against malware. This setting is causing this issue.
Resolution
The following steps can be used to enable UAC Admin Approval Mode:
- Open the Local Group Policy Editor or Local Security Policy:
- Press the Windows key + R to open the Run dialog
- Type gpedit.msc and press Enter to open Local Group Policy Editor
- Alternatively, type secpol.msc and press Enter to open Local Security Policy
- Navigate to Security Options:
- In the left-hand pane, navigate to: Windows Settings > Security Settings > Local Policies > Security Options
- Locate the specific policy:
- Find and double-click the User Account Control: Admin Approval Mode for the Built-in Administrator account policy
- Enable the policy:
- Select the Enabled option and click Apply > OK
- Restart your computer:
- A full restart is necessary for the changes to take effect
After restarting, the built-in administrator account can install the application.