When a file is copied from one location to another location, whether on the same or different volume, a new file is created in the destination location. The file inherits the permissions, the Access Control List (ACL), from its parent folder.
When a file is moved from one location to another on the same volume, the file retains its security descriptor. Only the pointer to the resource is modified.
When a file is moved from one location to another on a different volume, it acts similar to the copy, except the file is deleted from the source location. The moved file inherits the permission from the parent folder.
- Prior to moving the file, clear the Allow inheritable permissions from the parent to propagate to this object check box.
- Click Copy to copy the current permissions to the object.
- Move the file or folder to a different location on the same volume.
- Click Allow inheritable permissions from the parent to propagate to this object.
- Click Apply.
The permissions from the parent folder are added to the security descriptor of this object.
A security descriptor contains a Discretionary Access Control List (DACL), consisting of a list of access control entries (ACE). Each ACE consists of a Security Identification Number (SID), together with a list of accesses that the security principal, referred to by the SID, has to the resource.