How 2 Setup NTFS Permissions

HOME BACK

Pick a folder to work with on your server.

Right click the folder and select SHARING AND SECURITY.

You will click the SECURITY tab and you can see the permissions on the folder.

You can see I already have four groups assigned to this folder.

I have the ADMINISTRATORS group highlighted and you can see the permissions are grayed out.

This means the permissions are inherited from above.

I will click ADD to apply another group to this folder.

I will add the BACKUP OPERATORS group and click OK.

You now see the BACKUP OPERATORS in my list.

You can see by default the group was given READ & EXECUTE, LIST FOLDER CONTENTS, and READ under the ALLOW column.

If I click the first box under DENY across from FULL CONTROL then the group is denied everything.

By selecting DENY it overrides all other permissions.

I will click the ADVANCED tab.

I can see here in the list what is inherited and not inherited.

I will remove the checkmark from the first box next to ALLOW INHERITABLE PERMISSIONS FROM THE PARENT TO PROPAGATE TO THIS OBJECT AND ALL CHILD OBJECTS.

You can see I am given the option to COPY, REMOVE, or CANCEL.

I will click REMOVE.

Now click OK on this page.

You can see that I only have one group left in the listing.

All the other groups and users were inherited for this folder.

By removing them they are no longer able to access this folder.

I will click ADVANCED again.

I will place a checkmark back in the first box next to ALLOW INHERITABLE PERMISSIONS FROM THE PARENT TO PROPAGATE TO THIS OBJECT AND ALL CHILD OBJECTS.

I will click OK.

You now see the groups all came back and they have the grayed boxes under the ALLOW column.

I will click ADVANCED again.

I will remove the checkmark from the box next to ALLOW INHERITABLE PERMISSIONS FROM THE PARENT TO PROPAGATE TO THIS OBJECT AND ALL CHILD OBJECTS.

I will now choose COPY.

You can see now that I can edit the column under the ALLOW column by removing or adding checkmarks in the boxes.

This is due to the fact that the permissions are not inherited.

NOTE: Read permission allows users to view folder details and attributes and open a file.

NOTE: Write permission allows users to change folder or file data.

NOTE: List Folder Contents includes all Read permissions and adds the ability to view a folder’s content.

NOTE: Read And Execute includes all Read permissions and adds the ability to run programs.

NOTE: Modify includes all Read & Execute and Write permissions and allows for adding or deleting files.

NOTE: Full Control includes all permissions but gives the user the ability to take ownership of and change

permissions on a folder.

NOTE: If you Copy a file or folder you must have Read permission to the source file and Write permission to the

destination location.

NOTE: if you Move a file or folder you must have Read and Modify permission to the source and Write permission

To the destination location.

NOTE: If you Copy a file or folder from one NTFS to another NTFS partition the new copy inherits the permission

Of the destination location.

NOTE: If you Move a file or folder on the same NTFS partition the permission remain the same.

NOTE: If you Move a file or folder to a different NTFS partition it will inherit the permission of the destination.

This Ends The Task

Go back to top