NTFS File & Folder Permissions
NTFS folder permissions
NTFS security treats files and directories as objects. Each file or directory has an ACL, and users or groups can be given permission to access it.. FAT partitions do not support security.
To modify permissions for a file or directory, right-click on it in Explorer. Select the Security tab, then click the Permissions button to display the Permissions dialog.
Standard NTFS Folder Permissions |
|
| Folder Permission |
Description |
| Read |
View contents of folder and view its permissions, attributes, and ownership |
| Write |
Create new files and folders in the folder, modify its attributes, and view its permissions, attributes, and ownership |
| List Folder Contents |
View contents of folder only |
| Read & Execute |
Go into subfolders within the folder plus do everything Read and List Folder Contents permissions allow |
| Modify |
Delete the folder and do everything Read & Execute and Write permissions allow |
| Full Control |
Take ownership, modify permissions, and do everything that Modify permission allows |
NTFS FILE & FOLDER PERMISSIONS
NTFS file permissions
Standard NTFS File Permissions |
|
| File Permission |
Description |
| Read |
Open the file and view its permissions, attributes, and ownership |
| Write |
Modify the file, modify its attributes, and view its permissions, attributes, and ownership |
| Read & Execute |
Execute the file, plus do everything Read permission allows |
| Modify |
Delete the file and do everything Read & Execute and Write permissions allow |
| Full Control |
Take ownership, modify permissions, and do everything Modify permission allows |
Multiple NTFS Permissions
If a user is a member of more than one group that is assigned rights to a file or a directory, those rights added together make up his effective permissions.
All NTFS file permissions are added together except when a deny is encountered. DENY wipes out all other occurrences of the permission
These permissions give administrators the highest degree of control over how users can access files and folders stored on NTFS volumes. By selecting different sets of special permissions, administrators can create custom permissions for files or folders that need special access control.
NTFS FILE & FOLDER PERMISSIONS
The 18 NTFS special permissions.
File Permissions as Combinations of Special Permissions |
|||||
| Special Permission |
Read |
Write |
Read & Execute |
Modify |
Full Control |
| Read Data |
YES |
YES |
YES |
YES |
|
| Read Attributes |
YES |
YES |
YES |
YES |
|
| Read Extended Attributes |
YES |
YES |
YES |
YES |
|
| Read Permissions |
YES |
YES |
YES |
YES |
YES |
| Synchronize |
YES |
YES |
YES |
YES |
YES |
| Write Data |
YES |
YES |
YES |
||
| Append Data |
YES |
YES |
YES |
||
| Write Attributes |
YES |
YES |
YES |
||
| Write Extended Attributes |
YES |
YES |
YES |
||
| Execute File |
YES |
YES |
YES |
||
| Delete |
YES |
YES |
|||
| Delete Subfolders and Files |
YES |
||||
| Change Permissions |
YES |
||||
| Take Ownership |
YES |
||||
File Permissions Versus Folder Permissions
Microsoft has grouped these special permissions into two different sets: folder permissions, for securing folders and their files and subfolders, andfile permissions, for securing individual files within folders (and overriding folder permissions).