Views:

Access to folders and files is controlled with an access control list (ACL), which is a list of access control entries (ACE). Each ACE in an ACL identifies a trustee and specifies the access rights, called permissions, allowed or denied for that trustee. Standard permissions for files include the following:

  • Full Control: Granting this permission will give all access to the folder including administrative privileges.
  • Modify: Granting this permission will give the ability to edit files.
  • Read & Execute: Granting this permission will give the ability to run programs and scripts.
  • List Folder Contents: Granting this permission will give the ability to browse through the folder and subfolders.
  • Read: Granting this permission will give the ability to read files.
  • Write: Granting this permission will give the ability to make and delete files and folders.

Standard permissions for folders are the same as for files, with one additional permission called List Folder Contents. The ACL for any file or folder for which you have permission to manage the ACL can be viewed or edited on the Security tab of the Properties dialog.

To view or modify the ACL for a file or folder

  1. In File Explorer browse to a file or folder.
  2. Right-click the file or folder, click Properties, and then click the Security tab.
  3. On the Security tab, click Edit.

Trustees are listed in the Group or usernames box and are added and removed with the Add and Remove buttons. A trustee can be an individual user, or a defined group, such as Human Resources. Permissions for each trustee are listed in the Permissions for box when the trustee is selected in the Group or usernames box. Individual permissions can be explicitly granted or denied by setting the appropriate check boxes in the Allow or Deny columns. Special permissions and other advanced settings can be viewed and modified by clicking the Advanced button.

For more or detailed information on editing ACLs in Windows, there are a variety of resources available on the Internet, including:

 

Keywords: dfs, share folders, permissions, acl, ace