KB172008 - Default NTFS Permissions in Windows NT 3.5 and 3.51

Article ID: 172008

Article Last Modified on 11/1/2006

Microsoft Windows NT Workstation 3.5
Microsoft Windows NT Workstation 3.51
Microsoft Windows NT Server 3.5
Microsoft Windows NT Server 3.51

This article was previously published under Q172008

SUMMARY

This article lists default permissions of an drive that has been formatted to NTFS for the first time. Some of these directories will not be present on a Windows NT Workstation, and some of these directories are hidden by default.

MORE INFORMATION

The following lists default NTFS permissions on common Windows NT directories on drive C:

C:\-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
System - Full Control

C:\Msapps and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\Program Files and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\Temp-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
System - Full Control

C:\Users-

Administrators - Special (RWXD)
Everyone - List (RX)
System - Full Control

C:\Users\Default-

Creator/Owner - Full Control
Everyone - Special (RWX)
System - Full Control

C:\Win32app-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%-

Administrators- Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Config-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Cookies-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Cursors-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Desktop-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Fonts-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Help-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\History-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Inf-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Java and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Media-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Nwspool-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\Profiles-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\profiles\Administrators

Administrators - Full Control
System - Full Control

C:\%SystemRoot%\profiles\All Users and <subdirectories>-

Administrators - Full Control
Everyone - Read
System - Full Control

C:\%SystemRoot%\profiles\Default User and <subdirectories>-

Administrators - Full Control
Everyone - Read
System - Full Control

C:\%SystemRoot%\Profiles\<username> and <subdirectories>-

Administrators - Full Control
<username> - Full Control
System - Full Control

C:\%SystemRoot%\Repair-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\Shellnew-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Cache-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Config-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - List
Server Operators - List
System - Full Control

C:\%SystemRoot%\System32\Dhcp-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\System32\Drivers and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX) Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\System32\Inetsrv and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Lls-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Logfiles-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Netmon and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Os2 and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Ras

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change (RWXD)
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\System32\Repl

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\System32\Repl\Export and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Replicator- Change (RWXD)
Server Operators - Change (RWXD)
System - Full Control

C:\%SystemRoot%\System32\repl\import and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Replicator- Change (RWXD)
Server Operators - Change (RWXD)
System - Full Control

C:\%SystemRoot%\System32\Spool and <subdirectories>-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Read (RX)
Print Operators- Full Control
Server Operators - Full Control
System - Full Control

C:\%SystemRoot%\System32\Viewers-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

C:\%SystemRoot%\System32\Spool\Wins-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change (RWXD)
Server Operators - Change (RWXD)
System - Full Control

C:\%SystemRoot%\Temporary Internet Files and <subdirectories>

Administrators- Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

Any other directories-

Administrators - Full Control
Creator/Owner - Full Control
Everyone - Change
Server Operators - Change
System - Full Control

NOTE: These permissions do not apply to a drive that is converted to NTFS using the CONVERT utility. A converted NTFS drive consists of all files and directories with Everyone - Full Control as the default permission.

For additional information, please see the following article in the Microsoft Knowledge Base:

148437 Default NTFS Permissions in Windows NT

Keywords: kbinfo kbsetup KB172008