Basic Permissions

With NTFS, permissions are stored in the filesystem as part of the access control list (ACL) assigned to a file or a folder. As described in Table 11-1, files and folders have a slightly different set of basic permissions.

When working with permissions, keep in mind that some permissions are inherited based on the permissions of a parent folder. Inherited permissions are applied automatically, and you cannot edit inherited permissions without first overriding them. If you try to access a folder on your local computer and do not have appropriate permissions to do so, Windows will prompt you to provide administrator permissions (by default). Once you enter the administrator permissions, you'll be able to access the local folder as an administrator.

Table 11-1. Basic permissions for files and folders


Full Control


Read & Execute

List Folder Contents


How it's used Used with

Grants full control over the selected file or folder. Permits reading, writing, changing, and Files and deleting files and subfolders. Also permits changing permissions, deleting files in the folder folders regardless of their permissions, and taking ownership of a folder or a file. Selecting this permission selects all the other permissions as well.

Permits reading, writing, changing, and deleting a file or folder. With folders, permits Files and creating files and subfolders, but does not allow taking ownership ofa file or folder. Selecting folders this permission selects all the permissions below it.

Permits executing files. With folders, permits viewing and listing files and subfolders as well Files and as executing files. If applied to a folder, this permission is inherited by all files and subfolders folders within the folder. Selecting this permission selects the List Folder Contents and Read permissions as well.

Permits viewing and listing files and subfolders as well as executing files. Inherited only by Folders subfolders and not by files within the folder or its subfolders. only

Permits viewing and listing the contents of a file or folder. Permits viewing file attributes, Files and reading permissions, and synchronizing files. Read is the only permission needed to run folders scripts. Read access is required to access a shortcut and its target.

Figure 11-3. Working with basic permissions

Permission How it's used Used with

Write Permits creating new files in folders and writing data to existing files. Permits viewing file Files and attributes, reading permissions, and synchronizing files. Doesn't prevent deleting a folder folders or file's contents.

Viewing and modifying existing basic permissions

You can view or modify a file or folder's existing basic permissions by completing the following steps:

1. In Windows Explorer, right-click the file or folder you want to work with and then select Properties.

2. In the Properties dialog box, select the Security tab. As shown in Figure 11-3, the "Group or user names" list shows all users and groups with basic permissions for the selected file or folder. If you select a user or a group in this list, the assigned permissions are displayed in the "Permissions for Users" or "Permissions for Groups" list.

Select Users or Groups J

Was this article helpful?

0 0

Post a comment