Default NTFS Permissions in Windows NT

ID: Q148437

The information in this article applies to:

Microsoft Windows NT Workstation versions 3.5, 3.51, 4.0
Microsoft Windows NT Server versions 3.5, 3.51, 4.0

SUMMARY

This article lists default permissions of an drive that has been formatted to NTFS for the first time.

MORE INFORMATION

The following lists default NTFS permissions on common Windows NT directories on drive C:

C:\-

administrators- full control
creator/owner - full control
everyone- change
server operators- change
system- full control

C:\%SystemRoot%-

administrators- full control
creator/owner - full control
everyone- change
server operators- change
system- full control

C:\%SystemRoot%\msapps and <subdirectories>-

administrators- full control
creator/owner - full control
everyone- change
server operators- change
system- full control

C:\%SystemRoot%\repair-

everyone- full control

C:\%SystemRoot%\system-

administrators- full control
creator/owner - full control
everyone- change
server operators- change
system- full control

C:\%SystemRoot%\system32-

administrators- full control
creator/owner - full control
everyone- change
server operators- change
system- full control

C:\%SystemRoot%\system32\config-

administrators - full control
creator/owner - full control
everyone- List (rx)
system- full control

C:\%SystemRoot%\system32\dhcp-

administrators - full control
creator/owner - full control
everyone- read (rx)
server operators- full control
system- full control

C:\%SystemRoot%\system32\drivers and <subdirectories>-

administrators - full control
creator/owner - full control
everyone- read (rx)
server operators- full control
system- full control

C:\%SystemRoot%\system32\lls-

administrators - full control
creator/owner - full control
everyone- change
server operators- change
system- full control

C:\%SystemRoot%\system32\os2 and <subdirectories>-

administrators - full control
creator/owner - full control
everyone- change
server operators- change
system- full control

C:\%SystemRoot%\system32\ras

administrators - full control
creator/owner - full control
everyone- change (rwxd)
server operators- full control
system- full control

C:\%SystemRoot%\system32\repl

administrators - full control
creator/owner - full control
everyone- read (rx)
server operators- full control
system- full control

C:\%SystemRoot%\system32\repl\export

administrators - full control
creator/owner - full control
everyone- change
server operators- change
system- full control

C:\%SystemRoot%\system32\repl\export\scripts-

administrators - full control
creator/owner - full control
everyone- read (rx)
replicator- change (rwxd)
server operators- change (rwxd)
system- full control

C:\%SystemRoot%\system32\repl\import and <subdirectories>-

administrators - full control
creator/owner - full control
everyone- read (rx)
replicator- change (rwxd)
server operators- change (rwxd)
system- full control

C:\%SystemRoot%\system32\spool-

administrators - full control
creator/owner - full control
everyone- change (rwxd)
print operators- full control
server operators- full control
system- full control

C:\%SystemRoot%\system32\spool\drivers-

administrators - full control
creator/owner - full control
everyone- read (rx)
print operators- full control
server operators- full control
system- full control

C:\%SystemRoot%\system32\spool\drivers\w32x86-

administrators - full control
creator/owner - full control
everyone- read (rx)
print operators- full control
server operators- full control
system- full control

C:\%SystemRoot%\system32\spool\drivers\w32x86\1-

everyone- full control

C:\%SystemRoot%\system32\spool\printers-

administrators - full control
creator/owner - full control
everyone- read (rx)
print operators- full control
server operators- full control
system- full control

C:\%SystemRoot%\system32\spool\prtprocs and <subdirectories>-

administrators - full control
creator/owner - full control
everyone- read (rx)
print operators- full control
server operators- full control
system- full control

C:\%SystemRoot%\system32\spool\wins-

everyone- full control

C:\win32app-

administrators - full control
creator/owner - full control
everyone- read (rx)
server operators- full control
system- full control

C:\users-

account operators- special (rwxd)
administrators- special (rwxd)
everyone- list (rx)
system- full control

C:\users\default-

creator/owner- full control
everyone- special (rwx)
system- full control

C:\temp-

administrators - full control
creator/owner - full control
everyone- change
server operators- change
system- full control

Any other directories-

administrators - full control
creator/owner - full control
everyone- change
server operators- change
system- full control

NOTE: These permissions do not apply to a drive that is converted to NTFS using the CONVERT utility. A converted NTFS drive consists of all files and directories with Everyone- Full Control as the default permission.

Additional query words: prodnt directory


Keywords          : ntsecurity ntfilesys 
Version           : 3.50 3.51
Platform          : WINDOWS 
Issue type        :

Last Reviewed: February 11, 1999