[BUG] Cowork Windows - MSIX installs for elevating admin user, not calling standard user (split-account enterprise environment)
Preflight Checklist
- [x] I have searched existing issues and this hasn't been reported yet
- [x] This is a single bug report (please file separate reports for different bugs)
- [x] I am using the latest version of Claude Code
What's Wrong?
Claude Desktop with Cowork fails to install correctly in a standard enterprise split-account environment (non-admin daily user + separate admin account for elevation). The installer's elevated process registers the MSIX package and CoworkVMService under the admin account's context rather than the calling user's context, resulting in Claude Desktop installing without Cowork for the standard user.
What Should Happen?
The installer should register the MSIX package and Cowork components for the user who launched the installer (the standard user), not the user whose credentials are provided for UAC elevation. This is the standard enterprise deployment pattern — users work as standard accounts and provide admin credentials only when elevation is required.
Suggested Fix
The elevated process needs to:
Accept the calling user's SID/profile path as a parameter
Register the MSIX package for the calling user (Add-AppxPackage targeting the correct user)
Create the CoworkVMService with appropriate ACLs for the calling user
Handle the claude:// protocol registration in the calling user's profile, not the elevated user's profile
Error Messages/Logs
Actual Behavior
Cowork works on the admin account (mihart.adm)
Cowork is completely absent on the standard user account (mihart)
The claude:// protocol handler fails on every install attempt from the standard user
The installer creates CoworkVMService under the admin context, then cannot remove it on subsequent installsSteps to Reproduce
- Log in as standard (non-admin) domain user
- Run Claude Setup installer
- UAC prompts for admin credentials — provide separate admin account credentials
- Installer downloads MSIX, self-elevates, installs successfully
- explorer.exe claude:// fires — Windows reports "your computer does not have an app that can open this link"
- Claude Desktop installs but Cowork tab is missing
Claude Model
None
Is this a regression?
No, this never worked
Last Working Version
_No response_
Claude Code Version
New Claude Desktop installation, fails to install cowork.
Platform
Anthropic API
Operating System
Windows
Terminal/Shell
PowerShell
Additional Information
Environment
Windows Edition: Professional
Windows Version: 10.0.26200 (Windows 11)
Architecture: x64
Claude Version: 1.1.2685.0
Package: Claude_1.1.2685.0_x64__pzs8sxrjxfjjc
Domain-joined: Yes (Active Directory)
Account setup: Non-admin user (WILLHC\mihart) with separate admin account (WILLHC\mihart.adm) for UAC elevation
Hyper-V: Enabled, both accounts are members of Hyper-V Administrators local group
Sideloading: Enabled ("Anywhere" in Advanced app settings)
Log File on installation:
2026/02/11 12:58:55.695923 === Claude Setup started ===
2026/02/11 12:58:55.696436 AllowAllTrustedApps not found (sideloading assumed enabled): The system cannot find the file specified.
2026/02/11 12:58:55.696945 Windows edition: Professional
2026/02/11 12:58:55.697461 Windows version: 10.0.26200
2026/02/11 12:58:55.697461 Native arch: x64
2026/02/11 12:58:55.697461 Elevation type: Default
2026/02/11 12:58:55.697461 Is elevated: false
2026/02/11 12:58:55.697461 Sideloading enabled: true
2026/02/11 12:58:55.697461 S Mode: false
2026/02/11 12:58:55.697461 Conflicting service: false
2026/02/11 12:58:55.697461 Running in non-elevated context
2026/02/11 12:58:55.697974 Standard user — attempting MSIX install with credential prompt
2026/02/11 12:58:55.715550 Splash: 400x300, 8 frame(s), animated=true
2026/02/11 12:58:55.716059 System DPI: 96 (scale: 100%)
2026/02/11 12:58:55.742771 MSIX URL: https://claude.ai/api/desktop/win32/x64/msix/latest/redirect
2026/02/11 12:58:55.743286 Downloading MSIX to C:\Users\mihart\AppData\Local\Temp\Claude-3944297420.msix
2026/02/11 12:58:56.527864 Download progress: 10% (15450064 / 154175909 bytes)
2026/02/11 12:58:56.700214 Download progress: 20% (30866848 / 154175909 bytes)
2026/02/11 12:58:56.879637 Download progress: 30% (46284480 / 154175909 bytes)
2026/02/11 12:58:57.040385 Download progress: 40% (61701936 / 154175909 bytes)
2026/02/11 12:58:57.207049 Download progress: 50% (77119392 / 154175909 bytes)
2026/02/11 12:58:57.360114 Download progress: 60% (92519840 / 154175909 bytes)
2026/02/11 12:58:57.511475 Download progress: 70% (107937232 / 154175909 bytes)
2026/02/11 12:58:57.685617 Download progress: 80% (123354720 / 154175909 bytes)
2026/02/11 12:58:57.847449 Download progress: 90% (138771456 / 154175909 bytes)
2026/02/11 12:58:57.997063 Download progress: 100% (154175909 / 154175909 bytes)
2026/02/11 12:58:58.163132 Download complete: 154175909 bytes, SHA256: be2c46a9be89271f344f603b71c1f248c478a9192a4b83c1797b3b673d32f46d
2026/02/11 12:58:58.327421 Download complete
2026/02/11 12:58:58.336674 Self-elevating: C:\Users\mihart\OneDrive - Liberty Healthcare Management\Desktop\Claude Setup (1).exe --elevated --msix-path "C:\Users\mihart\AppData\Local\Temp\Claude-3944297420.msix" --log-path "C:\Users\mihart\AppData\Local\Temp\ClaudeSetup.log"
2026/02/11 12:59:14.985158 Waiting for elevated process to complete...
2026/02/11 12:59:15.020530 Log file: C:\Users\mihart\AppData\Local\Temp\ClaudeSetup.log
2026/02/11 12:59:15.021562 === Claude Setup started ===
2026/02/11 12:59:15.022619 AllowAllTrustedApps not found (sideloading assumed enabled): The system cannot find the file specified.
2026/02/11 12:59:15.022619 Windows edition: Professional
2026/02/11 12:59:15.023673 Windows version: 10.0.26200
2026/02/11 12:59:15.023673 Native arch: x64
2026/02/11 12:59:15.023673 Elevation type: Full
2026/02/11 12:59:15.023673 Is elevated: true
2026/02/11 12:59:15.023673 Sideloading enabled: true
2026/02/11 12:59:15.023673 S Mode: false
2026/02/11 12:59:15.023673 Conflicting service: false
2026/02/11 12:59:15.023673 Running in elevated context
2026/02/11 12:59:15.024186 Installing MSIX from C:\Users\mihart\AppData\Local\Temp\Claude-3944297420.msix
2026/02/11 12:59:15.046169 Splash: 400x300, 8 frame(s), animated=true
2026/02/11 12:59:15.047685 System DPI: 96 (scale: 100%)
2026/02/11 12:59:15.081165 Verifying Authenticode signature on C:\Users\mihart\AppData\Local\Temp\Claude-3944297420.msix
2026/02/11 12:59:16.116742 Signature check output:
STATUS:Valid
SUBJECT:CN="Anthropic, PBC", O="Anthropic, PBC", L=San Francisco, S=California, C=US, SERIALNUMBER=4860621, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US
2026/02/11 12:59:16.116742 Signature verified: valid Anthropic signature
2026/02/11 12:59:16.116742 Checking for running Squirrel Claude processes...
2026/02/11 12:59:16.116742 Squirrel process prefix: c:\users\mihart.adm\appdata\local\anthropicclaude\
2026/02/11 12:59:16.443589 No Squirrel Claude processes found
2026/02/11 12:59:16.443589 Checking for existing Claude MSIX packages...
2026/02/11 12:59:21.435135 Installing MSIX: C:\Users\mihart\AppData\Local\Temp\Claude-3944297420.msix
2026/02/11 12:59:25.047272 Add-AppxPackage stdout:
INSTALL_SUCCESS
2026/02/11 12:59:25.047272 No Squirrel installation found, skipping uninstall
2026/02/11 12:59:25.059209 MSIX installation succeeded
2026/02/11 12:59:25.060287 Launching Claude...
2026/02/11 12:59:25.060287 Launching Claude via explorer.exe claude://
2026/02/11 12:59:25.070876 === Claude Setup completed successfully ===
2026/02/11 12:59:25.078999 Elevated process exited with code 0
21 Comments
Exactly my case two, Enterprise/split-account issue. In Settings I can see a Cowork option but no tab at the top of the Claude Desktop window.
Having the same issues. Cant manage to get it to work using any of the suggested Claude fixes
Same / similar problems here. Please clarify if the app requires full admin rights or if it can be installed via an elevation command as most windows apps can.
I can confirm the issue with separate user and admin accounts in a business environment. It only works when the admin is logged in. When using the user account without admin privileges, there is no access to the Claude app installed in %ProgramFiles%\WindowsApps.
Thanks Paul. Just confirming:
The user running the software needs to be a local admin.
You cannot run the installer as administrator as an elevation from the user's account and expect the software to work properly.
I wonder if you can temporarily promote the user to admin, install, then demote.
Also affecting our org with split user/admin roles. Successful UAC elevation fails to install cowork for the original user.
I just ran a test, where I installed via local admin elevation and ran as admin but I still cant see the cowork options!
Hitting the same wall. Please fix.
same here. kind of limiting in non-admin mode
Same issue, can't believe it went out this way. This is a well known pattern
To work around this I ended up having to grab the msix, unzip it, strip out cowork, and sideload it. I now have claude working again, but who knows what'll happen when it tries to update...
I experienced the same and this is how I managed to install it.
ClaudeSetup.logfile after the failed installation attemptIn an elevated PowerShell run
The cowork functionality is now working for me
Hey folks.
Add-AppxProvisionedPackageis the correct thing to do here, it's documented in our help centre for deploying Claude Desktophttps://support.claude.com/en/articles/12622703-deploy-claude-desktop-for-windows
I could not get this to install via intune - always fails.
If you install system wide with the MSIX the end user will still be unable to use the full feature set without UAC and admin elevations.
Does the software require the user to always be admin? If so, lets clarify that in the docs.
It does not. Intune you should just be able to deploy the msix as-is, no special requirements
I tried and it is failing in all of my test cases. Anyone else out there get it working?
I have the same issue but none of your suggestions will work for me. The installation fails and nothing is installed when I don't provide admin credentials. It just fails and stops without installing anything but copying files.
I managed to do the same as @ificator did though and have a working solution for now. Why is it neccessary to install Cowork by default? It would be nice to get asked what i need. This could be the default. I also would be happy if there is a switch (i.e. --skip-cowork) in the future to skip the installation of Cowork. I do not need Claude Cowork in this environment.
A portable app would be a nice feature, that also could be used for these situations. I'm sure Claude will be happy to help. ;-)
We are dealing with the same issue here with the install failing using Intune.
We are having the same issue over here with Claude Cowork asking over and over for admin rights even though it has been installed already.
Running into issues w/ Cowork, as well. Intune can install, so long as we wrap the msix as intunewin and deploy using install script:
Add-AppxProvisionedPackage -Online -SkipLicense -PackagePath ".\Claude.msix" -Regions "All" -Verbose
cowork-svc.exe lands in the app\resources folder. The Cowork tab is grayed out in the application. User is standard and when selecting the Cowork tab, is asked to enable the feature, presenting a UAC prompt. Based on the AppxManifest XML, this is set to start automatically as localSystem - will this component always require admin rights in order to run?
<desktop6:Extension Category="windows.service" Executable="app\resources\cowork-svc.exe" EntryPoint="Windows.FullTrustApplication">
<desktop6:Service Name="CoworkVMService" StartupType="auto" StartAccount="localSystem">
This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.