NTFS file permissions

• Full Control allows you to read, write, modify, execute, change attributes, permissions, and take ownership of the file.
• Modify allows you to read, write, modify, execute, and change the file’s attributes.
• Read & execute will allow you to display the file’s data, attributes, owner, and permissions, and run the file if its a program.
• Read will allow you to open the file, view its attributes, owner, and permissions.
• Write will allow you to write data to the file, append to the file, and read or change its attributes.

NTFS folder permissions

• Full Control allows you to read, write, modify, and execute files in the folder, change attributes, permissions, and take ownership of the folder or files within.
• Modify allows you to read, write, modify, and execute files in the folder, and change attributes of the folder or files within.
• Read & execute will allow you to display the folder’s contents and display the data, attributes, owner, and permissions for files within the folder, and run files within the folder.
• List Folder Contents will allow you to display the folder’s contents and display the data, attributes, owner, and permissions for files within the folder.
• Read will allow you to display the file’s data, attributes, owner, and permissions.
• Write will allow you to write data to the file, append to the file, and read or change its attributes.

ASSIGNED PERMISSIONS

1. Right-click on the folder or file and select Properties.
2. Select the Security tab.

In this example, John Doe's assigned permissions are Read & execute, List folder contents, and Read. This means that John Doe access is Read & execute.

INHERITANCE

1. Right-click on the folder or file and select Properties.
2. Select the Security tab.
3. Select Advanced.

John's access at Advanced Security Settings is Read & execute, with no inheritance. Notice also that the Read & execute permission applies to This folder, subfolders, and files. 

ADVANCED PERMISSIONS

1. Right-click on the folder or file and select Properties.
2. Select the Security tab.
3. Select Advanced.
4. Double-click John Doe.
5. Select Show advanced permissions.

We can view and edit John's advanced permissions.

EFFECTIVE PERMISSIONS

Effective access is the combination of the folder or files assigned permission and inherited permissions.

1. Right-click on the folder or file and select Properties.
2. Select the Security tab.
3. Select Advanced.
4. Select the Effective Access tab.
5. Click the link Select a user.
6. Type the user or group name, seleck Check Names, and select OK.
7. Select View effective access.

Table of properties