MORE INFORMATION
The following lists default NTFS permissions on common Windows NT
directories on drive C:
C:\-
administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control
C:\%SystemRoot%-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
C:\%SystemRoot%\msapps and <subdirectories>-
administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control
C:\%SystemRoot%\repair-
C:\%SystemRoot%\system-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
C:\%SystemRoot%\system32-
administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control
C:\%SystemRoot%\system32\config-
administrators - full control
creator/owner - full control
everyone - List (rx)
system - full control
C:\%SystemRoot%\system32\dhcp-
administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control
C:\%SystemRoot%\system32\drivers and <subdirectories>-
administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control
C:\%SystemRoot%\system32\lls-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
C:\%SystemRoot%\system32\os2 and <subdirectories>-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
C:\%SystemRoot%\system32\ras
administrators - full control
creator/owner - full control
everyone - change (rwxd)
server operators - full control
system - full control
C:\%SystemRoot%\system32\repl
administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control
C:\%SystemRoot%\system32\repl\export
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
C:\%SystemRoot%\system32\repl\export\scripts-
administrators - full control
creator/owner - full control
everyone - read (rx)
replicator - change (rwxd)
server operators - change (rwxd)
system - full control
C:\%SystemRoot%\system32\repl\import and <subdirectories>-
administrators - full control
creator/owner - full control
everyone - read (rx)
replicator - change (rwxd)
server operators - change (rwxd)
system - full control
C:\%SystemRoot%\system32\spool-
administrators - full control
creator/owner - full control
everyone- change (rwxd)
print operators - full control
server operators - full control
system - full control
C:\%SystemRoot%\system32\spool\drivers-
administrators - full control
creator/owner - full control
everyone - read (rx)
print operators - full control
server operators - full control
system - full control
C:\%SystemRoot%\system32\spool\drivers\w32x86-
administrators - full control
creator/owner - full control
everyone- read (rx)
print operators - full control
server operators - full control
system - full control
C:\%SystemRoot%\system32\spool\drivers\w32x86\1-
C:\%SystemRoot%\system32\spool\printers-
administrators - full control
creator/owner - full control
everyone- read (rx)
print operators - full control
server operators - full control
system - full control
C:\%SystemRoot%\system32\spool\prtprocs and <subdirectories>-
administrators - full control
creator/owner - full control
everyone - read (rx)
print operators - full control
server operators - full control
system - full control
C:\%SystemRoot%\system32\wins-
C:\win32app-
administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control
C:\users-
account operators - special (rwxd)
administrators - special (rwxd)
everyone - list (rx)
system - full control
C:\users\default-
creator/owner - full control
everyone - special (rwx)
system - full control
C:\temp-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
Any other directories-
administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control
NOTE: These permissions do not apply to a drive that is converted to NTFS using the CONVERT utility. A converted NTFS drive consists of all files and directories with Everyone- Full Control as the default permission.
For additional information, click the article number below
to view the article in the Microsoft Knowledge Base:
244600 Default NTFS Permissions in Windows 2000