Windows 10 apps don't work on brand new Dell computer and laptop

Windows 10 apps don't work on brand new Dell computer and laptop. We have couple of Dell OptiPlex and Vostro with i5 and SSD hard disks delivered within the last two weeks and the latest Windows 10 build 1709. After creating account for Domain User which is member of Local Administrators Group, I discovered that Windows 10 built in apps like Calculator, Alarms, Maps, Office, etc. don't work at all. I managed to get it re-installed for one user after using the following commands in Powershell:
Get-AppxPackage -AllUsers| Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}
Get-AppxPackage | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}
(ran the commands with antivirus disabled). I also tried sfc /scannow but no luck. I even had to re-install Office 2016 on OptiPlex to make it work as it kept showing two entries for each Office software.
But that only worked for one user and OptiPlex and when I logged in as another user it did not work at all (although it looked the commands worked as it did for the first user)
When I log in with local admin which I used to set up the machines, it is fine.
Since devices are in production already, I cannot do the reinstall or refresh but am looking for a solution which would fix it.

Anybody experience problem like that? I had new Windows 10 devices before with other builds and had no problems with them. Any ideas?

Regards,
Tom
Tom SkowyrskiAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
No issue on domain-connected Lenovo machines.  Did you turn UAC OFF for any reason?

brand new Dell computer and laptop.   <-- Did you ask Dell Support (as warranty applies here)?
Greg ElliottChief EngineerCommented:
I have run into this problem with Windows 8/8.1/10 apps over and over again over the years.  And almost every site that posts the alleged solution suggests the PowerShell commands that you mentioned.  While sometimes it does help, I have never found it to be a 100% solution.

What has consistently helped for me is the following:

As a user with administrative privileges, go to "C:\Program Files" and check the advanced security settings for the "WindowsApps" folder.  The last entry will show the Users group with Read & execute permission, with a condition of "Exists WIN://SYSAPPID" or similar listed.  Upon trying to view this ACE, chances are good that you will see the message "This access control entry is corrupt.  Delete it and create a new one."

To fix this, you will need to take ownership of the folder so that you have access to change the ACL.  Then, delete the corrupt entry, and re-add Users with Read & execute permission.  Also add "ALL APPLICATION PACKAGES" with Read & execute permission as well.  For good measure, re-assign TrustedInstaller as owner of the folder when you have finished.

https://www.askvg.com/guide-how-to-restore-trustedinstaller-as-default-owner-of-a-file-or-folder-in-windows/

Also, please refer to the posts by SteveNone1966 and jadaml on page 4 of this forum:
https://answers.microsoft.com/en-us/windows/forum/windows_10-files-winpc/access-control-entry-is-corrupt/4e3d5500-5c7d-4839-be4f-c269705561ca?auth=1

Good luck!
Tom SkowyrskiAuthor Commented:
John, did not speak to Dell yet as I kinda can see that they will tell me about re-installing Windows unless they are aware of the issue.
I did it with UAC on and off.

Do you know if there is support from Microsoft for newly bought operating systems?

Greg, I am going onsite to see Dell OptiPlex tomorrow so will give it a go and will report back.
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

JohnBusiness Consultant (Owner)Commented:
So far as I know it is not a Windows problem but a Dell problem. Please start with Dell
Tom SkowyrskiAuthor Commented:
Tried permissions as suggested by Greg and it was just like you described (this was under not fully working profile). However, I did not try re-installing apps after that as the user required his computer.

Contacted Dell and was sent this link with the solution:
http://www.dell.com/support/article/uk/en/ukbsdt1/sln298640/issue-starting-using-built-in-windows-10-component?lang=en 
Solution.
1.Open a Command window started as Administrator by typing: cmd on the search bar then right-clicking or tap and hold then select Run as Administrator from the drop down list.
2.Repair corruption using the following command:
dism /online /cleanup-image /restorehealth then press the Enter key.
3.If this command reports problems that cannot be fixed, stop here. There may be a memory or hard drive issue. Windows needs to be Reset to repair the damage.
4.Run this command next:
Sfc /scannow then press the Enter key.
5.As above, if this reports problems that cannot be fixed, stop here. There may be a memory or hard drive issue. Windows needs to be Reset to repair the damage.
6.Now run these two commands:
PowerShell -ExecutionPolicy Unrestricted then press the Enter key.
Get-AppXPackage -AllUsers |Where-Object {$_.InstallLocation -like "*SystemApps*"} | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}then press the Enter key.
7.Watch for red errors, which could indicate a problem which cannot be repaired. If you see errors, Windows needs to be reset to repair the damage.

I am planning to do that next week as I am away and do not want to make it worse and not to be able to fix it remotely.
Tom SkowyrskiAuthor Commented:
Tried everything suggested, but the issue was still there. Decided to "Refresh" Windows. It finished on Friday evening successfully, so I will be setting up the laptop with user accounts and software on Monday and will let you know if everything is okay.
Tom SkowyrskiAuthor Commented:
Here is a procedure I followed and that has worked so far:
1. Reset Windows by going to Settings > Update & Security > Recovery > Reset this PC
2. Follow the steps to initially set up Windows after the reset
3. Turn off UAC and do not install Windows Updates (if you are quick Windows will not have time to do that), and restart device
4. As a user with administrative privileges, go to "C:\Program Files" and check the advanced security settings for the "WindowsApps" folder.  The last entry will show the Users group with Read & execute permission, with a condition of "Exists WIN://SYSAPPID" or similar listed.  Upon trying to view this ACE, chances are good that you will see the message "This access control entry is corrupt.  Delete it and create a new one." To fix this, you will need to take ownership of the folder so that you have access to change the ACL.  Then, delete the corrupt entry, and re-add Users with Read & execute permission.  Also add "ALL APPLICATION PACKAGES" with Read & execute permission as well.  For good measure, re-assign "NT Service/TrustedInstaller" as owner of the folder when you have finished. Restart device
5. Remove all Dell apps we don't use like Support Assist and Dell Digital Delivery and restart device
6. Create another user with administrative rights (part of local Administrators group), restart device and log in as that new user (this is were the problem was occurring before)
7. Set up everything you need on the device under that new user (I always keep the original Admin account for myself in case so users are not locked out)
8. When finished, demote user to standard user by enabling UAC and removing user from local Administrators group on the device and restarting the device
9. You can do Windows Updates

The above is for the device which is not part of the domain.
I am going to apply all of this for another machine which is part of the domain and will post update her by the end of the month (hopefully).

I do apologise for taking so long but my users are always so busy that it is difficult to take all this time to reset their device and start afresh.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Tom SkowyrskiAuthor Commented:
I will be honest that the best way to fix that is to do Reset and to not forget to fix the permissions after that as the first thing.
Also, Microsoft just released new version of Windows 10 so this may fix the issue.
And finally, I discovered that the permissions corruption is present on some of my Windows 10 computers which did not have this problem before (but they did not come with the same version 10 but the previous build and then had update applied).

Would you like me to test applying new Windows 10 update to the affected machine or shall I close this question here?

PS. Sorry for the delay, I was traveling and having trouble getting hold of affected machines.
JohnBusiness Consultant (Owner)Commented:
Did you contact Dell?  Microsoft Windows Updates have not been an issue for me. Dell did release some patches so you should contact their support people.
Tom SkowyrskiAuthor Commented:
I did not contact Della again but their last guide indicated that their may suggest "Windows needs to be reset to repair the damage."
I will install the latest built of Windows 10 tomorrow and will post the update.
JohnBusiness Consultant (Owner)Commented:
Try a Windows 10 Repair Install on one of the machines to see if that makes a difference.

https://www.microsoft.com/en-us/software-download/windows10

Windows 10 is running, so click on the Download button (not Upgrade Button, select Open (Run) but NOT Save. Allow the program to run. Allow drivers to update. Then select Keep Everything
Tom SkowyrskiAuthor Commented:
Updating Windows to the latest build did not fix the issue. Following the steps in the solution as fixing the Apps folder permission as suggested does the trick.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.