JSI Tip 0395 - What are the default NTFS permissions?

When you convert to NTFS, all files and directories default to Everyone - Full Control.

When you format a drive as NTFS and install Windows NT, the following default permissions apply (assuming drive C:):

C:

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
System - Full Control

C:Msapps and

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:Program Files and

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:Temp

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
System - Full Control

C:Users

Administrators - Special (RWXD)
Everyone - List(RX)
System - Full Control

C:UsersDefault

Creator/Owner - Full Control
Everyone - Special (RWX)
System - Full Control

C:Win32app

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read(RX)
Server Operators - Full Control
System - Full Control

C:%SystemRoot%

Administrators- Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Config

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Cookies

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Cursors

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Desktop

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Fonts

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Help

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%History

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Inf

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Java and

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Media

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Nwspool

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%Profiles

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%profilesAdministrators

Administrators - Full Control
System - Full Control

C:%SystemRoot%profilesAll Users and

Administrators - Full Control
Everyone - Read
System - Full Control

C:%SystemRoot%profilesDefault User and

Administrators - Full Control
Everyone - Read
System - Full Control

C:%SystemRoot%Profiles and

Administrators - Full Control
- Full Control
System - Full Control

C:%SystemRoot%Repair

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read
Server Operators - Full Control
System - Full Control

C:%SystemRoot%Shellnew

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%System

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%System32

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%System32Cache

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%System32Config

Administrators - Full Control
Creator/Owner - Full Control
Everyone - List
Server Operators - List
System - Full Control
C:%SystemRoot%System32Dhcp

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read(RX)
Server Operators - Full Control
System - Full Control

C:%SystemRoot%System32Drivers and

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read(RX)
Server Operators - Full Control
System - Full Control

C:%SystemRoot%System32Inetsrv and

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%System32Lls

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%System32Logfiles

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%System32Netmon and

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%System32Os2 and

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%System32Ras

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change(RWXD)
Server Operators - Full Control
System - Full Control

C:%SystemRoot%System32Repl

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read(RX)
Server Operators - Full Control
System - Full Control

C:%SystemRoot%System32ReplExport and

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read(RX)
Replicator- Change(RWXD)
Server Operators - Change(RWXD)
System - Full Control

C:%SystemRoot%System32replimport and

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read(RX)
Replicator- Change(RWXD)
Server Operators - Change(RWXD)
System - Full Control

C:%SystemRoot%System32Spool and

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read(RX)
Print Operators- Full Control
Server Operators - Full Control
System - Full Control

C:%SystemRoot%System32Viewers

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:%SystemRoot%System32SpoolWins

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change(RWXD)
Server Operators - Change(RWXD)
System - Full Control

C:%SystemRoot%Temporary Internet Files and

Administrators- Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

Other directories

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control