With NTFS permissions, you can assign special permissions to users or groups. Special permissions provide more of a customized unique level of permissions for your files and folders. Here are the NTFS special permissions.
Traverse Folder/Execute File
- For folders, enables the object to navigate through the folder structure below the folder where the permission is applied.
- For files, enables the object to execute an application program stored in the folder.
List Folder/Read Data
- For folders, enables the object to see the names of files and subfolders stored in the folder where the permission is applied.
- For folders, enables the object to view the contents of files stored in the folder.
Read Attributes
- Enables the object to view the attributes of a file or folder.
Read Extended Attributes
- Enables the object to view the extended attributes of a file or folder.
- Extended attributes are generally defined by an application and vary from program to program.
Create Files/Write Data
- For folders, enables the object to create new files within the folder.
- For files, enables the object to change or replace the contents of an existing file.
Create Folders/Append Data
- For folders, enables the object to create new subfolders within the folder.
- For files, enables the object to add data to the end of an existing file without otherwise altering the content of the file, including deleting the file.
Write Attributes
- Enables the object to change the attributes on an existing file or subfolder within the folder.
Write Extended Attributes
- Enables the object to change the extended attributes on an existing file or subfolder within the folder.
- Extended attributes are generally defined by an application and will vary from program to program.
Delete Subfolders and Files
- Enables the object to delete a file or subfolder, even if the Delete permission has not been granted to the object.
Delete
- Enables the object to delete a file or folder.
- An object can still delete a file or folder without this permission set if the object has been granted the Delete Subfolders and Files permission.
Read Permissions
- Enables the object to view the security permissions set on files and subfolders within the folder.
Change Permissions
- Enables the object to change security permissions on files and subfolders within the folder.
Take Ownership
- Enables the object to change the owner of a file or folder to the object’s user ownership.
Full Control
- Enables the object to perform all Special Permissions.
For additional training resources, check out our online IT training courses.
Check out our extensive IT book series.
