United States

Change

All Microsoft Sites

Microsoft Support

Article ID: 148437 - Last Review: October 31, 2006 - Revision: 2.1

Default NTFS Permissions in Windows NT

View products that this article applies to.

This article was previously published under Q148437

Expand all | Collapse all

SUMMARY

This article lists default permissions of an drive that has been formatted to NTFS for the first time.

MORE INFORMATION

The following lists default NTFS permissions on common Windows NT directories on drive C:

C:\-

administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\msapps and <subdirectories>-

administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\repair-

everyone - full control

C:\%SystemRoot%\system-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\system32-

administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\system32\config-

administrators - full control
creator/owner - full control
everyone - List (rx)
system - full control

C:\%SystemRoot%\system32\dhcp-

administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control

C:\%SystemRoot%\system32\drivers and <subdirectories>-

administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control

C:\%SystemRoot%\system32\lls-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\system32\os2 and <subdirectories>-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\system32\ras

administrators - full control
creator/owner - full control
everyone - change (rwxd)
server operators - full control
system - full control

C:\%SystemRoot%\system32\repl

administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control

C:\%SystemRoot%\system32\repl\export

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\system32\repl\export\scripts-

administrators - full control
creator/owner - full control
everyone - read (rx)
replicator - change (rwxd)
server operators - change (rwxd)
system - full control

C:\%SystemRoot%\system32\repl\import and <subdirectories>-

administrators - full control
creator/owner - full control
everyone - read (rx)
replicator - change (rwxd)
server operators - change (rwxd)
system - full control

C:\%SystemRoot%\system32\spool-

administrators - full control
creator/owner - full control
everyone- change (rwxd)
print operators - full control
server operators - full control
system - full control

C:\%SystemRoot%\system32\spool\drivers-

administrators - full control
creator/owner - full control
everyone - read (rx)
print operators - full control
server operators - full control
system - full control

C:\%SystemRoot%\system32\spool\drivers\w32x86-

administrators - full control
creator/owner - full control
everyone- read (rx)
print operators - full control
server operators - full control
system - full control

C:\%SystemRoot%\system32\spool\drivers\w32x86\1-

everyone - full control

C:\%SystemRoot%\system32\spool\printers-

administrators - full control
creator/owner - full control
everyone- read (rx)
print operators - full control
server operators - full control
system - full control

C:\%SystemRoot%\system32\spool\prtprocs and <subdirectories>-

administrators - full control
creator/owner - full control
everyone - read (rx)
print operators - full control
server operators - full control
system - full control

C:\%SystemRoot%\system32\wins-

everyone - full control

C:\win32app-

administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control

C:\users-

account operators - special (rwxd)
administrators - special (rwxd)
everyone - list (rx)
system - full control

C:\users\default-

creator/owner - full control
everyone - special (rwx)
system - full control

C:\temp-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

Any other directories-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

NOTE: These permissions do not apply to a drive that is converted to NTFS using the CONVERT utility. A converted NTFS drive consists of all files and directories with Everyone- Full Control as the default permission.

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

244600 (http://support.microsoft.com/kb/244600/EN-US/ ) Default NTFS Permissions in Windows 2000