How to Fix MRT Blocked by System Administrator in Windows 11

The Microsoft Malicious Software Removal Tool (MRT) is a built-in security utility that helps remove specific, widespread malware. However, when you try to run it manually, you may see an error saying “MRT has been blocked by your system administrator”—even on a personal PC where you’re the only user.

If you’re facing this issue on Windows 11, the block is almost always caused by Group Policy, registry-based security policies, or device management settings—not malware or a broken MRT file. This guide explains why MRT gets blocked and shows you all safe ways to unblock it, step by step.

Why MRT Is Blocked by System Administrator

This message appears when Windows detects a policy that explicitly prevents MRT from running. Common reasons include:

• A Group Policy setting disabling MRT
• Registry policies left behind by debloating tools
• Work or school (MDM) device management
• Security hardening scripts
• Organization or domain policies
• Local security restrictions

Even on home PCs, third-party tools or past tweaks can trigger this.

Fix MRT Blocked by System Administrator in Windows 11

Follow the steps below in order. After each step, try running MRT again using Windows + R → mrt.

1. Check and Disable MRT Blocking in Group Policy (Most Important)

This is the most common cause on Windows 11 Pro, Enterprise, and Education.

1. Press Windows + R, type gpedit.msc, and press Enter.
2. Navigate to: Computer Configuration → Administrative Templates → Windows Components → Microsoft Malicious Software Removal Tool
3. Double-click Turn off the Microsoft Malicious Software Removal Tool.
4. Set it to Not Configured or Disabled.
5. Click Apply → OK.
6. Restart your PC.

If this policy was enabled, MRT will immediately stop being blocked.

2. Remove the MRT Block via Registry (Works on Windows 11 Home)

If you’re using Windows 11 Home or the policy editor is unavailable, the block is usually in the registry.

1. Press Windows + R, type regedit, and press Enter.
2. Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MRT
3. Look for a DWORD named: DontOfferThroughWUAU
4. Either:
   • Delete this value
     or
   • Set its value to: 0
5. Close Registry Editor and restart your PC.

This removes the administrative restriction.

3. Check If the Device Is Managed (Work or School)

If your PC is managed, MRT may be blocked intentionally.

1. Open Settings → Accounts → Access work or school.
2. If you see an organization account connected:
   • The block is likely enforced by policy
3. If this is a personal PC:
   • Disconnect the work or school account
   • Restart Windows

On managed devices, only the IT administrator can unblock MRT.

4. Run MRT Directly as Administrator

Sometimes the block message appears only through shortcuts.

1. Open File Explorer.
2. Go to: C:\Windows\System32
3. Right-click mrt.exe.
4. Select Run as administrator.

If it opens this way, the restriction is limited to standard execution.

5. Reset Local Security Policies (Advanced)

Security policies can silently block system tools.

1. Open Command Prompt (Admin).
2. Run: secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose
3. Restart your PC.

This resets local security policies to default values.

6. Repair System Files (Important if Policy Won’t Clear)

Corrupted policy files can cause false administrator blocks.

Run SFC

sfc /scannow

Then Run DISM

DISM /Online /Cleanup-Image /RestoreHealth

Restart Windows after both commands complete.

7. Reinstall MRT via Windows Update

If MRT was blocked during an update:

1. Open Settings → Windows Update.
2. Click Check for updates.
3. Install all available updates.
4. Restart your PC.

Windows Update will reinstall MRT with default permissions.

8. Download MRT Directly from Microsoft (Safe Fallback)

If the built-in copy is blocked:

• Download the latest Microsoft Malicious Software Removal Tool directly from Microsoft
• Run the downloaded file as administrator

This version bypasses some local policy restrictions.

Wrapping Up

If you see “MRT blocked by system administrator” in Windows 11, it’s almost always due to Group Policy or registry restrictions, not a broken tool or malware infection. By disabling the MRT block policy, removing registry restrictions, checking device management status, and repairing system files, you can restore access to MRT in most personal PC setups.

Once unblocked, MRT will run normally—either manually or automatically through Windows Update—adding an extra layer of protection to your system.