Windows 10 Font Folder nightmare

I have an issue with Windows 10 that is driving me mental.. For  whatever reason the fonts folder constantly blocks installations that require font installations.. Example Auto Desk Viewer hangs up on "Error Writing to file: C:\Windows\Fonts\arial.tff Verify that you have access to that directory" but it is also happening when I try to install Desi lite which is a label making program "Error Writing to file: C:\Windows\Fonts\DesiPictograms.tff Verify that you have access to that directory"

All of my users have local admin rights, I have tried installing using the domain admin account and the local admin account with same issue. When I originally upgraded to Office 16 word was also complaining about access denied when I would select a font..

When logged on as admin I tried to access the fonts folder permissions and I get "access denied"

Any ideas?
kevin taylorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
Share the output of
icacls c:\windows\fonts
It should be
c:\windows\fonts NT SERVICE\TrustedInstaller:(F)
                 NT SERVICE\TrustedInstaller:(CI)(IO)(F)
                 NT AUTHORITY\SYSTEM:(M)
                 NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
                 BUILTIN\Administrators:(M)
                 BUILTIN\Administrators:(OI)(CI)(IO)(F)
                 BUILTIN\Users:(RX)
                 BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
                 CREATOR OWNER:(OI)(CI)(IO)(F)
                 APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(RX)
                 APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(IO)(GR,GE)
                 APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(RX)
                 APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(OI)(CI)(IO)(GR,GE)

Open in new window

kevin taylorAuthor Commented:
C:\WINDOWS\system32>icacls c:\windows\fonts
c:\windows\fonts NT AUTHORITY\SYSTEM:(RX)
                 BUILTIN\Administrators:(RX)
                 BUILTIN\Users:(RX)
                 NT SERVICE\TrustedInstaller:(F)
                 APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(RX)
                 APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(RX)

Successfully processed 1 files; Failed processing 0 files
McKnifeCommented:
See? ACL is not what it should be. Reset it with icacls.
On a different PC, dump permissions of c:\windows\fonts with icacls and restore them on your pc.
CEOs need to know what they should worry about

Nearly every week during the past few years has featured a headline about the latest data breach, malware attack, ransomware demand, or unrecoverable corporate data loss. Those stories are frequently followed by news that the CEOs at those companies were forced to resign.

Read more
kevin taylorAuthor Commented:
Okay how do I export that file and import into this pc?
McKnifeCommented:
Saving (folder for the ACLfile is d:, here - adjust accordingly)
icacls c:\windows\fonts /save d:\AclFile.txt

Open in new window

Restoring:
icacls c:\windows\ /restore d:\AclFile.txt

Open in new window

kevin taylorAuthor Commented:
Okay I get access denied?

Microsoft Windows [Version 10.0.17763.379]
(c) 2018 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>icacls c:\windows\ /restore c:\AclFile.txt
c:\windows\fonts: Access is denied.
Successfully processed 0 files; Failed processing 1 files

C:\WINDOWS\system32>
kevin taylorAuthor Commented:
currently logged in as local admin, not domain
McKnifeCommented:
Right click cmd.exe, select "run as administrator" and repeat.
McKnifeCommented:
Wait, I am sorry, this will not work. Please do a step in between: on the elevated command prompt, use takeown.exe on c:\windows\fonts, first.
kevin taylorAuthor Commented:
is it takeown.exe c:\windows\fonts? or does the command go different
McKnifeCommented:
takeown.exe /f c:\windows\fonts
kevin taylorAuthor Commented:
C:\WINDOWS\system32>takeown.exe /f c:\windows\fonts

SUCCESS: The file (or folder): "c:\windows\fonts" now owned by user "ACEWS01\HP USER".

C:\WINDOWS\system32>icacls c:\windows\ /restore c:\AclFile.txt
c:\windows\fonts: Access is denied.
Successfully processed 0 files; Failed processing 1 files

C:\WINDOWS\system32>icacls c:\windows\ /restore c:\AclFile.txt
c:\windows\fonts: Access is denied.
Successfully processed 0 files; Failed processing 1 files

C:\WINDOWS\system32>

still access denied
McKnifeCommented:
That is weird.
I wonder why it won't let you now that you are the owner. Let me think...
kevin taylorAuthor Commented:
Here is the core of my issue, everything I install to do with fonts folder fails.. However I can install fonts.. very weird.. see attachment
Untitled.png
kevin taylorAuthor Commented:
Seems I ran into this once before and the only way I could fix it was through the security tab on the fonts folder. But I can't remember how to enable to security tab, its hidden by default..
McKnifeCommented:
Please try

icacls d:\own /grant ACEWS01\HP USER:f

Open in new window

If that is executed on an elevated command prompt and FAILS, this can only mean, we have a file system error and you will need to run
chkdsk /r c:

Open in new window

and retry.
kevin taylorAuthor Commented:
C:\WINDOWS\system32>icacls c:\own /grant ACEWS01\HP USER:f
Invalid parameter "ACEWS01\HP"
McKnifeCommented:
Sorry, enclose it in ""
icacls c:\own /grant "ACEWS01\HP USER":f

Open in new window

kevin taylorAuthor Commented:
C:\WINDOWS\system32>icacls c:\own /grant "ACEWS01\HP USER":f
c:\own: The system cannot find the file specified.
Successfully processed 0 files; Failed processing 1 files

okay I replaced own with \windows\font got same error.. shouldn't the parameter be folder?
McKnifeCommented:
LOL. Own was my test folder, forgot to change that. The foldername is fonts, not font.
kevin taylorAuthor Commented:
McKnife after disk chk last night the following command succeeded..

C:\Users\administrator.ANDREWENG>icacls c:\windows\fonts /grant "ACEWS01\HP USER":f
processed file: c:\windows\fonts
Successfully processed 1 files; Failed processing 0 files

C:\Users\administrator.ANDREWENG>
kevin taylorAuthor Commented:
however I just realized it says domain admin is owner, not hp user.. Didn't notice that before I ran the command
McKnifeCommented:
Now that's great. Please return to the original plan and run 
icacls c:\windows\ /restore c:\AclFile.txt

Open in new window

McKnifeCommented:
Possibly the ACLs are alright anyway, after running chkdsk. It might have fixed the corruption.
kevin taylorAuthor Commented:
No still get access denied trying to run the install.. see attachment  .. Also folder icacls look the same as before

C:\Users\administrator.ANDREWENG>icacls c:\windows\fonts
c:\windows\fonts ACEWS01\HP USER:(F)
                 NT AUTHORITY\SYSTEM:(RX)
                 BUILTIN\Administrators:(RX)
                 BUILTIN\Users:(RX)
                 NT SERVICE\TrustedInstaller:(F)
                 APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(RX)
                 APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(RX)

when I run an import of a proper icacls I get this ..

C:\Users\administrator.ANDREWENG>icacls c:\windows\ /restore c:\AclFile.txt
c:\windows\fonts: Access is denied.
Successfully processed 0 files; Failed processing 1 files

Chk Dsk didn't change anything..

ARGGGG!!
Untitled.png
McKnifeCommented:
You don't follow the instructions to the T. You need to run the command elevated ("run as administrator") as user ACEWS01\HP USER

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kevin taylorAuthor Commented:
okay.. sorry.. logging out and logging into HP USER
kevin taylorAuthor Commented:
McKnife I want to give you  a big hug!!!! Worked like a charm!!! However I didn't do it with the local user I followed the instructions to the "T" with the domain admin..

Thank you my Brudda!!
kevin taylorAuthor Commented:
Appreciate you hanging with me and helping me get through this windows 10 bug..
McKnifeCommented:
Very welcome.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.