Set, View, Change, or Remove Permissions on Files and Folders

Applies To: Windows 7, Windows Server 2008 R2

When a file or folder is created, Windows assigns default permissions to that object.

Modify is the minimum permission required to complete this procedure. Review the details in "Additional considerations" in this topic.

To set, view, change, or remove permissions on files and folders

  1. Right-click the file or folder for which you want to set permissions, click Properties, and then click the Security tab.

  2. Click Edit to open the Permissions for <Object> dialog box.

  3. Do one of the following:

    • To set permissions for a group or user that does not appear in the Group or user names box, click Add. Type the name of the group or user you want to set permissions for, and then click OK.

    • To change or remove permissions from an existing group or user, click the name of the group or user.

  4. Do one of the following:

    • To allow or deny a permission, in the Permissions for <User or Group> box, select the Allow or Deny check box.

    • To remove the group or user from the Group or user names box, click Remove.

Additional considerations

  • For a description of all permissions, see Permission Entry Dialog Box.

  • Performing this procedure might require you to elevate permissions through User Account Control.

  • To open Windows Explorer, click Start, point to All Programs, click Accessories, and then click Windows Explorer.

  • You can set file and folder permissions only on drives formatted to use NTFS.

  • To change permissions, you must be the owner or have been granted permission to do so by the owner.

  • Groups or users that are granted Full Control permission for a folder can delete files and subfolders within that folder, regardless of the permissions that protect the files and subfolders.

  • If the check boxes under Permissions for <User or Group> are shaded or if the Remove button is unavailable, the file or folder has inherited permissions from the parent folder.

  • When adding a new user or group, by default, this user or group will have Read & Execute, List Folder Contents, and Read permissions.

Additional references