KB148437 - Default NTFS Permissions in Windows NT

Article ID: 148437

Article Last Modified on 10/31/2006

APPLIES TO

Microsoft Windows NT Workstation 3.5
Microsoft Windows NT Workstation 3.51
Microsoft Windows NT Workstation 4.0 Developer Edition
Microsoft Windows NT Server 3.5
Microsoft Windows NT Server 3.51
Microsoft Windows NT Server 4.0 Standard Edition

This article was previously published under Q148437

SUMMARY

This article lists default permissions of an drive that has been formatted to NTFS for the first time.

MORE INFORMATION

The following lists default NTFS permissions on common Windows NT directories on drive C:

C:\-

administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\msapps and <subdirectories>-

administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\repair-

everyone - full control

C:\%SystemRoot%\system-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\system32-

administrators- full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\system32\config-

administrators - full control
creator/owner - full control
everyone - List (rx)
system - full control

C:\%SystemRoot%\system32\dhcp-

administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control

C:\%SystemRoot%\system32\drivers and <subdirectories>-

administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control

C:\%SystemRoot%\system32\lls-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\system32\os2 and <subdirectories>-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\system32\ras

administrators - full control
creator/owner - full control
everyone - change (rwxd)
server operators - full control
system - full control

C:\%SystemRoot%\system32\repl

administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control

C:\%SystemRoot%\system32\repl\export

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

C:\%SystemRoot%\system32\repl\export\scripts-

administrators - full control
creator/owner - full control
everyone - read (rx)
replicator - change (rwxd)
server operators - change (rwxd)
system - full control

C:\%SystemRoot%\system32\repl\import and <subdirectories>-

administrators - full control
creator/owner - full control
everyone - read (rx)
replicator - change (rwxd)
server operators - change (rwxd)
system - full control

C:\%SystemRoot%\system32\spool-

administrators - full control
creator/owner - full control
everyone- change (rwxd)
print operators - full control
server operators - full control
system - full control

C:\%SystemRoot%\system32\spool\drivers-

administrators - full control
creator/owner - full control
everyone - read (rx)
print operators - full control
server operators - full control
system - full control

C:\%SystemRoot%\system32\spool\drivers\w32x86-

administrators - full control
creator/owner - full control
everyone- read (rx)
print operators - full control
server operators - full control
system - full control

C:\%SystemRoot%\system32\spool\drivers\w32x86\1-

everyone - full control

C:\%SystemRoot%\system32\spool\printers-

administrators - full control
creator/owner - full control
everyone- read (rx)
print operators - full control
server operators - full control
system - full control

C:\%SystemRoot%\system32\spool\prtprocs and <subdirectories>-

administrators - full control
creator/owner - full control
everyone - read (rx)
print operators - full control
server operators - full control
system - full control

C:\%SystemRoot%\system32\wins-

everyone - full control

C:\win32app-

administrators - full control
creator/owner - full control
everyone - read (rx)
server operators - full control
system - full control

C:\users-

account operators - special (rwxd)
administrators - special (rwxd)
everyone - list (rx)
system - full control

C:\users\default-

creator/owner - full control
everyone - special (rwx)
system - full control

C:\temp-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

Any other directories-

administrators - full control
creator/owner - full control
everyone - change
server operators - change
system - full control

NOTE: These permissions do not apply to a drive that is converted to NTFS using the CONVERT utility. A converted NTFS drive consists of all files and directories with Everyone- Full Control as the default permission.

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

244600 Default NTFS Permissions in Windows 2000

Additional query words: prodnt directory

Keywords: KB148437