Issue with modifying contents of WindowsApps folder

Ah yes, the elusive WindowsApps folder.
After following instructions from Microsoft forums to give full control of the folder, I still cannot accomplish what I want to do, which is to simply copy paste a couple of files with File Explorer.
I purchased Audio Video Tag Editor Studio from the MS store because the method to buy it direct from the app site doesn't work. (If you buy it directly, it installs in the standard Program Files folder) The program is on a site named 3delite.hu, and they recommend you replace ffmpeg and mkvmerge programs to ensure the latest compatibility.
So with mkvmerge, the version that comes with the program is version 72, the latest version is 90. You would figure a simple copy paste action to do the trick, with the UAC kicking in to allow the copy to complete. WRONG!
mkvmerge rests in the folder: C:\Program Files\WindowsApps\N.C.S.TradeHungaryKft.AudioVideoTagEditorStudio_5.0.0.0_x64__3tgx1wpncj3xy\mkvtoolnix\
It would appear the root folder, \N.C.S.TradeHungaryKft.AudioVideoTagEditorStudio_5.0.0.0_x64__3tgx1wpncj3xy\ has a - symbol on the Read Only status. Attempting to toggle that off, you are immediately greeted with a UAC request, and then an access denied as it tries to modify the attributes of any of the files in the folder.
I followed instructions on tenforum to use alternate methods within CMD or Powershell to disable the Read Only attributes. Neither process gives an error message, but they also do not remove the Read-Only status.

Is there something else at play here that prevents the attribute from being removed? Is there a Trustedinstaller based file manager app that I could use to force what I want? Should I try some safe mode action of some sort?
TIA.

you cannot copy/paste with elevated cmd? there shouldnt be any restrictions in doing such. one option would be to make the proper batch file and create a scheduled task that runs as "SYSTEM" to execute said batch file.

easy option to do what you need is to take ownership of the WindowsApps folder, but i dont recommend that unless you are positive you can put perms back to how they are now (properly... otherwise you'll have a world of problems down the road).

Could also boot in safe mode, and access the folder there, and copy the files, then there are no restriction on that folder.

Download PowerRun, which temporarily gives you a CMD or PowerShell with TrustedInstaller privileges. This is the correct way, don't take ownership of the folders. That's because no one reminds you to return the original permissions when done.

garlin said:

Download PowerRun, which temporarily gives you a CMD or PowerShell with TrustedInstaller privileges. This is the correct way, don't take ownership of the folders. That's because no one reminds you to return the original permissions when done.

Click to expand...

or psexec (run as SYSTEM)

You have to explain where to download psexec.
PsExec - Sysinternals | Microsoft Learn

dacrone said:

you cannot copy/paste with elevated cmd? there shouldnt be any restrictions in doing such. one option would be to make the proper batch file and create a scheduled task that runs as "SYSTEM" to execute said batch file.

easy option to do what you need is to take ownership of the WindowsApps folder, but i dont recommend that unless you are positive you can put perms back to how they are now (properly... otherwise you'll have a world of problems down the road).

Click to expand...

Thanks team for the responses. Will try them one by one.
Have seen different posts between taking ownership and having access. I currently have both ME and EVERYONE as having access and none seem to work. Even using an elevated CMD prompt, I get this:

After the experiment, I will delete the Everyone and Me full control access. I assume leaving those in place might cause malware or a rogue installer from causing damage?

garlin said:

Download PowerRun, which temporarily gives you a CMD or PowerShell with TrustedInstaller privileges. This is the correct way, don't take ownership of the folders. That's because no one reminds you to return the original permissions when done.

Click to expand...

And just like my elevated CMD prompt, I get the same exact error.

Do you have the app open or another process which is using the same tool?

dacrone said:

or psexec (run as SYSTEM)

Code:

psexec -i -s cmd.exe

Click to expand...

This one does not even ask if I want to overwrite the existing file. I goes straight to access denied. Must not have read access (?) to the restricted folder. When I execute said command, I get a gui dialog about Sysinternals, so I figure it must be running correctly.

I think those folders are protected by a secondary security feature, and trying to change access rights to the folder has no use.
However you can do it in safemode, like a suggested before.

Typically if a WindowsApp is in use, you can't change its files according to the security model. mkmerge is bundled inside the App, so you have to check if other processes aren't calling AudioVideoTagEditorStudio or mkverge while you're doing this.

Tester said:

I think those folders are protected by a secondary security feature, and trying to change access rights to the folder has no use.
However you can do it in safemode, like a suggested before.

Click to expand...

Safe mode did not work either. It gave the same usual error when trying to do it simply using file explorer after giving access to the folder and subfodlers. It asks for permission, you do so, then you keep getting a denied error afterwards during the actual copy.

garlin said:

Typically if a WindowsApp is in use, you can't change its files according to the security model. mkmerge is bundled inside the App, so you have to check if other processes aren't calling AudioVideoTagEditorStudio or mkverge while you're doing this.

Click to expand...

Double checked everything running, there are no instances of either program running at the moment.

I appreciate everyone's input on this. As much as I want to lick the problem, I reached out the the author of the program and they have provided me with a license key to the program direct on their site, which will install in the standard Program Files folder. They were just as perplexed as me when I initially asked them where the program was even hidden.

I suspect that most apps installed via the Windows Store will go in this folder.

I will have other purposes for Power Run, so that's a bonus coming out of this thread.

then take ownership, make changes, restore ownership:

takeown:

restore owner: