Default NTFS Permissions in Windows NT

ID: Q148437

The information in this article applies to:
  • Microsoft Windows NT Workstation versions 3.5, 3.51, 4.0
  • Microsoft Windows NT Server versions 3.5, 3.51, 4.0
  • Microsoft Windows 2000 Professional
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server

SUMMARY

This article lists default permissions of an drive that has been formatted to NTFS for the first time.


MORE INFORMATION

The following lists default NTFS permissions on common Windows NT directories on drive C:

C:\-

administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Windows 2000:
everyone - full control

C:\%SystemRoot%-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
everyone - read and execute
system - full control

C:\%SystemRoot%\msapps and <subdirectories>-
administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\repair-
everyone - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
system - full control
creator owner - full control

C:\%SystemRoot%\system32-
administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
everyone - read and execute
system - full control

C:\%SystemRoot%\system32\config-
administrators - full control
creator/owner - full control
everyone - List (rx)
system - full control
Windows 2000:
users - read and execute
power users - read and execute
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\dhcp-
administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control
Windows 2000:
users - read and execute
power users - read and execute
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\drivers and <subdirectories>-
administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control
Windows 2000:
users - read and execute
power users - read and execute
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\lls-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\os2 and <subdirectories>-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\ras
administrators - full control
creator/owner - full control
everyone - change (rwxd)
server operators - full control
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\repl
administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control
Windows 2000:
This directory structure does not exist under Windows 2000

C:\%SystemRoot%\system32\repl\export
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Windows 2000:
This directory structure does not exist under Windows 2000

C:\%SystemRoot%\system32\repl\export\scripts-
administrators - full control
creator/owner - full control
everyone - read (rx)
replicator - change (rwxd)
server operators - change (rwxd)
system - full control
Windows 2000:
This directory structure does not exist under Windows 2000

C:\%SystemRoot%\system32\repl\import and <subdirectories>-
administrators - full control
creator/owner - full control
everyone - read (rx)
replicator - change (rwxd)
server operators - change (rwxd)
system - full control
Windows 2000:
This directory structure does not exist under Windows 2000

C:\%SystemRoot%\system32\spool-
administrators - full control
creator/owner - full control
everyone- change (rwxd)
print operators - full control
server operators - full control
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\spool\drivers-
administrators - full control
creator/owner - full control
everyone - read (rx)
print operators - full control
server operators - full control
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\spool\drivers\w32x86-
administrators - full control
creator/owner - full control
everyone- read (rx)
print operators - full control
server operators - full control
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\spool\drivers\w32x86\1-
everyone - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\spool\printers-
administrators - full control
creator/owner - full control
everyone- read (rx)
print operators - full control
server operators - full control
system - full control
Windows 2000:
everyone - full control

C:\%SystemRoot%\system32\spool\prtprocs and <subdirectories>-
administrators - full control
creator/owner - full control
everyone - read (rx)
print operators - full control
server operators - full control
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\%SystemRoot%\system32\wins-
everyone - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

C:\win32app-
administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control
Windows 2000:
This directory structure does not exist under Windows 2000

C:\users-
account operators - special (rwxd)
administrators - special (rwxd)
everyone - list (rx)
system - full control
Windows 2000:
C:\Documents and Settings
system - full control
administrators - full control
users - read and execute
power users - read and execute
everyone - read and execute

C:\users\default-
creator/owner - full control
everyone - special (rwx)
system - full control
Windows 2000:
C:\Documents and Settings\Default User
system - full control
administrators - full control
users - read and execute
power users - read and execute
everyone - read and execute

C:\temp-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Windows 2000:
everyone - full control

Any other directories-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Windows 2000:
users - read and execute
power users - modify
administrators - full control
creator owner - full control
system - full control

NOTE: These permissions do not apply to a drive that is converted to NTFS using the CONVERT utility. A converted NTFS drive consists of all files and directories with Everyone- Full Control as the default permission.

Additional query words: prodnt directory

Keywords : ntsecurity ntfilesys
Version : WINDOWS:2000; winnt:3.5,3.51,4.0
Platform : WINDOWS winnt
Issue type :


Last Reviewed: January 26, 2000
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.