Default NTFS Permissions in Windows 2000

ID: Q244600

The information in this article applies to:
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Professional
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server

SUMMARY

This article lists the default permissions on a drive that has been formatted with the NTFS file system for the first time. Some of these folders may not be present in Windows 2000 Professional, and some of these folders are hidden by default.


MORE INFORMATION

The default NTFS permissions on common Windows 2000 folders on drive C are: 


C:\ 
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   System - Full Control

C:\Program Files and <subfolders>
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\Temp
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   System - Full Control

C:\Documents and Settings
   Administrators - Special (RWXD)
   Everyone - List (RX)
   System - Full Control

C:\Documents and Settings\Administrator and <subfolders>
   Creator/Owner - Full Control
   Everyone - Special (RWX)
   System - Full Control

C:\Documents and Settings\All Users and <subfolders>
   Creator/Owner - Full Control
   Everyone - Special (RWX)
   System - Full Control

C:\Documents and Settings\Default User and <subfolders>
   Creator/Owner - Full Control
   Everyone - Special (RWX)
   System - Full Control

C:\%SystemRoot%
   Administrators- Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Addins
   Administrators- Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change

C:\%SystemRoot%\Connection Wizard
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Config
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\CSC
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\CSC\D1
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\CSC\D2
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\CSC\D3
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\CSC\D4
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\CSC\D5
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\CSC\D6
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\CSC\D7
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\CSC\D8
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Cursors
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Debug
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Downloaded Program Files
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Driver Cache
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Driver Cache\I386
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Fonts
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Help
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Inf
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Installer
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Java and <subfolders>
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Media
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%Mmsagent and subfolders
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Mapps and subfolders
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Mw32 and subfolders
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Offline Web Pages 
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Registration
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Repair
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read
   Server Operators - Full Control
   System - Full Control

C:\%SystemRoot%\Registration
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read
   Server Operators - Full Control

C:\%SystemRoot%\Security and <subfolders>
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read
   Server Operators - Full Control

C:\%SystemRoot%\Speech
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System32
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System32\CatRoot
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change 
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System32\Com 
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System32\Config
   Administrators - Full Control
   Creator/Owner - Full Control 
   Everyone - List
   Server Operators - List
   System - Full Control

C:\%SystemRoot%\System32\Dhcp
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX)
   Server Operators - Full Control
   System - Full Control

C:\%SystemRoot%\System32\Drivers and <subfolders>
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX) 
   Server Operators - Full Control
   System - Full Control

C:\%SystemRoot%\System32\DTCLog
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX) 
   Server Operators - Full Control
   System - Full Control

C:\%SystemRoot%\system32\export
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX) 
   Server Operators - Full Control
   System - Full Control

C:\%SystemRoot%\System32\GroupPolicy and <subfolders>
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX) 
   Server Operators - Full Control
   System - Full Control

C:\%SystemRoot%\System32\IAS
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX) 
   Server Operators - Full Control
   System - Full Control

C:\%SystemRoot%\System32\Inetsrv 
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System32\Mui and <subfolders>
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System32\Npp
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System32\NtmsData
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System32\Os2 and <subfolders>
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System32\Ras
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change (RWXD)
   Server Operators - Full Control
   System - Full Control

C:\%SystemRoot%\System32\Rocket
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX)
   Server Operators - Full Control
   System - Full Control

C:\%SystemRoot%\System32\Rpcproxy
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX)
   Replicator- Change (RWXD)
   Server Operators - Change (RWXD)
   System - Full Control

C:\%SystemRoot%\System32\Setup
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX)
   Replicator- Change (RWXD)
   Server Operators - Change (RWXD)
   System - Full Control

C:\%SystemRoot%\System32\ShellExt
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX)
   Replicator- Change (RWXD)
   Server Operators - Change (RWXD)
   System - Full Control

C:\%SystemRoot%\System32\Spool and <subfolders>
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Read (RX)
   Print Operators- Full Control
   Server Operators - Full Control 
   System - Full Control

C:\%SystemRoot%\System32\Wbem and <subfolders>
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\System32\Wins
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change (RWXD)
   Server Operators - Change (RWXD)
   System - Full Control

C:\%SystemRoot%\Tasks
   Administrators- Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\Temp
   Administrators- Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

C:\%SystemRoot%\twain_32
   Administrators- Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control
 
C:\%SystemRoot%\Web
   Administrators- Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control

Any other folders
   Administrators - Full Control
   Creator/Owner - Full Control
   Everyone - Change
   Server Operators - Change
   System - Full Control
NOTE: These permissions do not apply to a drive that is converted to NTFS using the Convert utility. A converted NTFS drive consists of all files and folders with Everyone--Full Control as the default permission.

Additional query words:

Keywords : kbenv
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbinfo


Last Reviewed: December 29, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.