Fix: Your IT Administrator has Limited Access

The error ‘Your IT Administrator has Limited Access’ can potentially be caused by third-party antivirus software and pops up when you’ve recently updated your Windows 10 and try to turn on the Windows Defender. The Windows Defender is an integral part of the Windows 10 that scans your PC without bothering you every time you boot up your system like the other third-party antivirus software out there. The Windows Defender is really effective and requires updates to keep your system safe from the newest malware on the internet. As it’s a built-in component so you can’t really uninstall it however what you can do is turn it off which is something to avoid if you are not a tech guru.

As you can tell from the error itself, it pops up when you try to turn on Windows defender all the while not having the permissions to do it. There are a few ways you can implement to get this error sorted — so no need to worry about that.

Windows Defender Error
Windows 10 Windows Defender Error

What causes your IT Administrator has Limited Access on Windows 10?

The error refers to insufficient permissions which can be due to —

  • Third-party antivirus software. If you’ve been using a third-party antivirus software before the error popped up, it could be due to the antivirus interference.
  • Group policies. Another reason for this error emerging would be group policies. If you’ve set the Windows Defender to disabled in the Group policies, that could be stopping you from turning it back on.

To solve the error, go through the following solutions:-

Solution 1: Sign in as an Administrator

Before you try to turn on Windows Defender, make sure you are signed in as an Administrator. If you have multiple accounts created on your system, log in to the administrative account. If you use a guest or any other non-administrative account, it will result in the error popping up so make sure you’re clear there.

Solution 2: Remove your Antivirus

Another reason for the error appearing could be your third-party antivirus software that is installed on your system. It could potentially be interfering with your system and preventing you from turning on Windows Defender or it might’ve messed up with Windows Defender files due to which it is unable to start again. Therefore, make sure you’ve uninstalled your antivirus before trying to turn on the Windows Defender.

Solution 3: Using a Hidden Administrator Account

When you install Windows on your computer, a hidden administrator account is created automatically. This account is usually utilized by Microsoft Support or any other technicians when you report an error that you’re encountering to them. Hence, to make use of its privileges, use the account to turn on Windows Defender. Here’s how to log into it:

  1. Press Winkey + X and select ‘Command Prompt (Admin)‘.
  2. In the command prompt, type in the following:
    windows hidden account
    Windows command prompt
net user administrator /active:yes
  1. This command makes the hidden account active so you can log into it on the Login screen.
  2. Log out of your account, and log into the hidden administrator account.
  3. Now, try to turn on Windows defender again.

Please make sure to avoid using the account under normal conditions as it can be risky. You can use the following command to make the account inactive:

net user administrator /active:no
deactivate administrator account
Windows – cmd

Solution 4: Editing Group Policies

If you’ve set the ‘Turn off Windows Defender’ policy to ‘Enabled’, that could be one of the reasons the error is popping up. In such an event, you’ll have to edit the Group Policies. Here’s how to do it:

  1. Press Winkey + R to open Run.
  2. Type in ‘gpedit.msc’ to open Group Policies Editor.
  3. Under Computer Configuration, click ‘Administrative Templates’.
  4. Click ‘Windows Components’ to expand the list.
  5. Find ‘Windows Defender’ and on the right-side double-click ‘Turn off Windows Defender’ and ‘Allow antimalware service to startup with normal priority’.
    Group Policies Windows
    Windows Defender Policies
  6. Select Disabled, hit Apply and then click OK.
    Windows defender policies
    Windows Defender policies editor
  7. After that, on the same list at the top, you’ll find ‘Client Interface’.
    windows defender policies
    Windows Group Policy – Windows Defender
  8. Open up ‘Client Interface‘ and then finally double-click ‘Enable headless UI mode’.
    Client interface policies
    Windows Defender Client Interface
  9. Set it to ‘Disabled’.
  10. Hit Apply and OK.
  11. Close the Group Policy Editor and try to turn on Windows Defender (might require a reboot).
ABOUT THE AUTHOR

Kevin Arrows


Kevin Arrows is a highly experienced and knowledgeable technology specialist with over a decade of industry experience. He holds a Microsoft Certified Technology Specialist (MCTS) certification and has a deep passion for staying up-to-date on the latest tech developments. Kevin has written extensively on a wide range of tech-related topics, showcasing his expertise and knowledge in areas such as software development, cybersecurity, and cloud computing. His contributions to the tech field have been widely recognized and respected by his peers, and he is highly regarded for his ability to explain complex technical concepts in a clear and concise manner.

Comments

21
    IV
    Ignacio Antonio Benavides Vall Mar 26, 2019

    I’ve got the same error even in the ‘Administrator’ account.

      SW
      Shane Warren Author Sep 14, 2019

      Have you tried the group policy fix?

    RY
    ryan Aug 9, 2019

    gpedit.msc does not work

      SW
      Shane Warren Author Sep 6, 2019

      You must be on Windows Home

      SW
      Shane Warren Author Sep 6, 2019

      Install GPEdit on your windows and try the steps

    WD
    Ward Dejonckheere Sep 1, 2019

    The group policy change worked immmediately, i didn’t have any antivirus installed and have no idea why the message showed up. Thx for the fix.

    Reply
    RH
    Ricardo Sousa-Harding Sep 27, 2019

    thx a lot Editing Group Policies work for me but you need windows pro not home just for people know

    Reply
      SW
      Shane Warren Author Jan 30, 2020

      What version of windows are u using?is it windows home?

        SH
        Shai Humphries Jan 30, 2020

        I’m using Win10 Home, I’ve tried downloading it but it still won’t work. I have ‘regedit’ though but I don’t knw where to find it there

          SW
          Shane Warren Author Feb 2, 2020

          perform an SFC scan and see if that fixes the issue

    SI
    Sicariux May 22, 2020

    nothing works for me

      SW
      Shane Warren Author May 27, 2020

      Ok, are you facing this issue on your personal computer or on your work/school computer?

    DE
    Djfatrockbeatz EM Jun 28, 2020

    It work for me thanks

    AK
    Abdullah Khan Nov 5, 2020

    i dont have window defender antivirus in my group policies.

      MZ
      Muhammad Zubyan Author Nov 5, 2020

      Try using this script I have made for you open notepad and paste this script in your notepad then save it as a “.reg” file. After saving it as a reg file double click on it and then restart your computer. Your Windows defender should be disabled now.Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindows Defender]
      “DisableAntiSpyware”=dword:00000001

      Reply
        AK
        Abdullah Khan Nov 12, 2020

        not working

          MZ
          Muhammad Zubyan Author Nov 16, 2020

          Can you confirm if Windows defender is running in the background or not? Open task manager and check for service named “antimalware service executable” if you can’t able to find it. It means that Windows defender is disabled.

    WD
    Waqas Jutt DeryAala Nov 21, 2021

    nothing worked for me. windows defender running in backgroung

      MZ
      Muhammad Zubyan Author Nov 24, 2021

      Try using this script I have made for you open notepad and paste this script in your notepad then save it as a “.reg” file. After saving it as a reg file double click on it and then restart your computer. Your Windows defender should be disabled now.Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindows Defender]
      “DisableAntiSpyware”=dword:00000001

    GH
    Greg Harrison Jun 25, 2022

    I used that hidden admin account and was able to turn on and update Windows 10 built-in AV and when I went logged back in to my account everything worked! Thanks for this help, you beat Microsoft tech support on this!

    Reply