Reset Windows App Privacy Settings for All Users

In Windows, Universal Windows Platform (UWP) applications require specific privacy permissions to access system capabilities such as the camera, microphone, location, and contacts. When permissions become misconfigured or need to be standardized across an entire system, you can reset universal app privacy settings for all users using the Windows Registry Editor. This guide details the exact registry paths and steps required to clear existing consents and restore default privacy prompts system-wide.

Step 1: Open Registry Editor with Administrative Privileges

  1. Press Windows Key + R to open the Run dialog box.
  2. Type regedit and press Ctrl + Shift + Enter to open the Registry Editor as an Administrator.
  3. Click Yes when prompted by User Account Control (UAC).

Global privacy permissions that apply across all users are managed in the CapabilityAccessManager key in HKEY_LOCAL_MACHINE.

  1. In the Registry Editor address bar, paste the following path and press Enter:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore

  2. Under the ConsentStore key, you will see subkeys corresponding to individual device capabilities, including:

    • webcam (Camera)
    • microphone (Microphone)
    • location (Location services)
    • contacts (Contacts)
    • userAccountInformation (Account info)

Step 3: Reset Global Capability Permissions

To reset the machine-wide baseline for a specific capability:

  1. Select the capability subkey (for example, microphone or webcam).
  2. In the right pane, locate the Value string (REG_SZ).
  3. Double-click Value and set its data to one of the following states:
    • Prompt: Forces Windows to ask the user for permission when an app requests access.
    • Allow: Automatically grants permission across all apps.
    • Deny: Blocks access across all apps.
  4. To remove stored permissions for specific installed apps under that capability, expand the capability key and delete the individual app package subkeys listed underneath it.

Step 4: Reset Stored Permissions for All Active User Profiles

Each user account also stores individual app approvals. To clear individual user choices across all active accounts on the machine:

  1. In the Registry Editor, navigate to:

    HKEY_USERS

  2. You will see several security identifier (SID) folders representing currently loaded user accounts (e.g., S-1-5-21-...).

  3. For each user SID folder, expand the path:

    [User_SID]\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore

  4. Delete the subkeys for specific apps inside each capability folder, or delete the entire capability folder (such as webcam or microphone) to completely clear the user’s customized consent history. Windows will automatically recreate these keys with default values the next time an app requests access.

Step 5: Restart the System

After modifying or deleting the target registry keys, close the Registry Editor and restart your computer to apply the changes across all user sessions. When users launch universal apps, they will be prompted again to grant access to system hardware and personal data.