United States

Change

All Microsoft Sites

Microsoft Support

Article ID: 172008 - Last Review: November 1, 2006 - Revision: 3.1

Default NTFS Permissions in Windows NT 3.5 and 3.51

View products that this article applies to.

This article was previously published under Q172008

Expand all | Collapse all

SUMMARY

This article lists default permissions of an drive that has been formatted to NTFS for the first time. Some of these directories will not be present on a Windows NT Workstation, and some of these directories are hidden by default.

MORE INFORMATION

The following lists default NTFS permissions on common Windows NT directories on drive C:

C:\-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
System - Full Control

C:\Msapps and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\Program Files and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\Temp-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
System - Full Control

C:\Users-

Administrators - Special (RWXD)
Everyone - List (RX)
System - Full Control

C:\Users\Default-

Creator/Owner - Full Control
Everyone - Special (RWX)
System - Full Control

C:\Win32app-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%-

Administrators- Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Config-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Cookies-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Cursors-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Desktop-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Fonts-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Help-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\History-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Inf-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Java and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Media-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Nwspool-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Profiles-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\profiles\Administrators

Administrators - Full Control
System - Full Control

C:\%SystemRoot%\profiles\All Users and <subdirectories>-

Administrators - Full Control
Everyone - Read
System - Full Control

C:\%SystemRoot%\profiles\Default User and <subdirectories>-

Administrators - Full Control
Everyone - Read
System - Full Control

C:\%SystemRoot%\Profiles\<username> and <subdirectories>-

Administrators - Full Control
<username> - Full Control
System - Full Control

C:\%SystemRoot%\Repair-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\Shellnew-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Cache-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Config-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - List
Server Operators - List
System - Full Control

C:\%SystemRoot%\System32\Dhcp-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\System32\Drivers and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX) Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\System32\Inetsrv and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Lls-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Logfiles-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Netmon and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Os2 and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Ras

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change (RWXD)
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\System32\Repl

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\System32\Repl\Export and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Replicator- Change (RWXD)
Server Operators - Change (RWXD)
System - Full Control

C:\%SystemRoot%\System32\repl\import and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Replicator- Change (RWXD)
Server Operators - Change (RWXD)
System - Full Control

C:\%SystemRoot%\System32\Spool and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Print Operators- Full Control
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\System32\Viewers-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Spool\Wins-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change (RWXD)
Server Operators - Change (RWXD)
System - Full Control

C:\%SystemRoot%\Temporary Internet Files and <subdirectories>

Administrators- Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

Any other directories-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

NOTE: These permissions do not apply to a drive that is converted to NTFS using the CONVERT utility. A converted NTFS drive consists of all files and directories with Everyone - Full Control as the default permission.

For additional information, please see the following article in the Microsoft Knowledge Base:

148437 (http://support.microsoft.com/kb/148437/EN-US/ ) Default NTFS Permissions in Windows NT