HomeAppAdding SYSTEM to Administrators group causes modern apps to fail in Windows 8.1 Adding SYSTEM to Administrators group causes modern apps to fail in Windows 8.1 By Andreas Stenhall July 4, 2014 App, Apps, Modern apps, Windows 8.1 0 Comments After extensive troubleshooting, hours after hours, I have finally located a certainly interesting problem with the install routine of modern apps, including the immersive control panel in Windows 8.1 (with Update). Problem description Whenever a user logs into a domain joined Windows 8.1 machine all modern apps included in the image have “x” / crosses on them and they cannot be started. Also the immersive control panel an all its settings are unavailable. A few of the error messages and codes: Trying to start a modern app: This app can’t open. There’s a problem with <app name>. Contact your system administrator about repairing or reinstalling it or This app does not support the contract specified or is not installed. and in Swedish: Den här appen stöder inte det angivna avtalet eller så har det inte installerats. Trying to install an app using Add-AppxPackage PowerShell cmdlet: Add-AppxPackage : Deployment failed with HRESULT: 0x80073CF6, Package could not be registered. error 0x8007064A: Cannot register the request because the following error was encountered while initializing the windows.repositoryExtension extension: The configuration data for this product is corrupt. Contact your support personnel. Cause After going through a bunch of GPOs and hundreds of settings and excluding the most likely settings I finally reached out to what turned out to be the cause. Simply the use of “restricted groups” in group policies to add NT AUTHORITY\SYSTEM to the local Administrators group on the Windows 8.1 machines is what is the cause. The problem can easily be reproduced by adding SYSTEM to the Administrators group on domain or non-domain joined machines. BE AWARE: SYSTEM has more privileges on a Windows box than an Administrator. Adding SYSTEM to the local administrators group effectively lowers the privileges of the SYSTEM account which apart from apparently causing modern apps to fail have a bunch of other unpredicted results on a Windows machine. Solution The solution is to remove SYSTEM from the local Administrators group from being applied via restricted groups. Adding the group SYSTEM to the local Administrators group is not necessary as SYSTEM is a member of the Administrators group per default, although it is not visible in the GUI (Computer Management). Share this:FacebookTwitterLinkedIn Tags:0x8007064A, 0x80073CF6, Group Policies, Restricted Groups, SYSTEM, Windows 8.1 Related Posts Taming the user interface in Windows 8.1 for enterprise users UAC settings when remote controlling Windows clients to prevent screen freezing A unique book on managing Windows clients in an enterprise environment About Author Andreas Stenhall I'm Andreas Stenhall and my work passion is Windows 10 in combination with Enterprise Mobility. I do consulting, I produce and teach my own courses, I lecture and I present and my formal work title is senior workplace architect at Coligo in Stockholm, Sweden. I'm also proud to be an Microsoft MVP since 2009. I have presented at TechEd in the US and Europe and regional TechyDays. Follow me on twitter @AndreasStenhall. Phone +46707894758. Add a Comment Cancel replyYou must be logged in to post a comment.