How to set folder or file access permissions in Windows 11/10?
September 15, 2026Welcome to the Blackview store, which offers basic laptop for students, best mini pc for home theatre , and more. Hope the guide helps.
Managing folder or file access permissions in Windows 11/10 is essential when you share a computer, protect sensitive documents, manage work files, or configure access for multiple user accounts. Windows provides several built-in ways to control who can read, modify, execute, or take ownership of files and folders. Depending on your situation, you can use File Explorer, the Security tab, Advanced Security Settings, Command Prompt, PowerShell, or shared-folder settings.
Understanding Windows permissions is particularly important for administrators and advanced users. Incorrectly changing permissions can prevent applications from accessing required files or even lock users out of important folders. Before making significant changes, it is recommended to understand the difference between basic permissions, inheritance, ownership, and network sharing permissions.
This guide explains how to set folder or file access permissions in Windows 11 and Windows 10 , including graphical and command line methods. Although the interface differs slightly between the two operating systems, the underlying NTFS permission system is largely the same.
- Read also: How to hide apps on Windows 10/11?
- How to hide Recycle Bin from desktop?
- How to hide drive in Windows 10/11?
- How to lock a file in a Windows?
Understanding Windows File and Folder Permissions
Windows NTFS permissions determine what a user or group can do with a file or folder.
Common permissions include:
- Full control: Users can read, modify, delete, create, and change permissions.
- Modify: Users can read, write, modify, and delete files.
- Read & execute: Users can open files and run executable programs.
- List folder contents: Users can view files and subfolders.
- Read: Users can view and open files.
- Write: Users can create or modify files and folders.
Windows permissions are normally assigned to users or groups. For example, you could give one Windows account Read access while giving another account Modify access.
It is also important to distinguish NTFS permissions from share permissions . NTFS permissions control local access and access through a shared NTFS volume, while share permissions primarily apply when a folder is accessed through the network.
How to Set Folder or File Permissions in Windows 11
Windows 11 provides several ways to manage permissions. The most common approach is through File Explorer.
Method 1: Change Permissions Through File Explorer
This is the easiest graphical method for most users.
- Open File Explorer .
- Navigate to the file or folder whose permissions you want to change.
- Right-click the item.
- Select Properties .
- Open the Security tab.
- Select the user or group under Group or user names .
- Click Edit .
- Select the permission you want to allow or deny.
- Check Allow or Deny for the required permission.
- Click Apply .
- Click OK to save the changes.
For example, if another user only needs to view documents, select Read & execute and Read while avoiding Modify or Full control .
Method 2: Use Advanced Security Settings
Advanced Security Settings provides more detailed control, particularly when inheritance or ownership needs to be changed.
- Right-click the file or folder.
- Select Properties .
- Open Security .
- Click Advanced .
- Review the current owner and permission entries.
- Click Change next to the owner if ownership needs to be transferred.
- Enter the appropriate Windows user or group.
- Click Check Names and then OK .
- To create a custom permission entry, select Add .
- Click Select a principal .
- Enter the user or group.
- Select the required permissions.
- Choose whether the permissions apply to the folder, subfolders, files, or a combination.
- Click OK and then Apply .
Advanced settings are particularly useful when you need to control permissions for only specific subfolders or files.
Method 3: Take Ownership of a File or Folder
If Windows prevents you from modifying permissions because another account owns the object, you may need to take ownership first.
- Open Properties for the file or folder.
- Select Security .
- Click Advanced .
- Find the Owner field.
- Click Change .
- Enter your administrator account or another authorized account.
- Select Check Names .
- Click OK .
- If available, enable the option to replace ownership on child objects.
- Click Apply .
- Return to the Security settings and assign the required permissions.
Do not take ownership of protected Windows system files unless you have a specific administrative reason.
Method 4: Set Permissions Using Command Prompt
Advanced users can use the icacls command to manage NTFS permissions.
- Open Command Prompt as Administrator .
-
Use icacls to view existing permissions:
icacls "C:\Example\Folder" -
Grant a user permission with a command such as:
icacls "C:\Example\Folder" /grant Username:(M) - Replace Username with the appropriate account.
- Use (R) for Read access and (F) for Full control.
- Add /T when you need the change to apply recursively to files and subfolders.
- Verify the result with icacls again.
Because command-line permission changes can affect many files at once, double-check the path before pressing Enter.
Method 5: Use PowerShell
PowerShell can be useful for administrators managing permissions across many files.
- Open PowerShell as Administrator .
-
Inspect the current access control list:
Get-Acl "C:\Example\Folder" - Create or modify an access rule using PowerShell's ACL-related commands.
- Apply the updated ACL to the required file or folder.
- Use Get-Acl again to verify the result.
PowerShell is especially useful when permission management needs to be automated across multiple folders.
How to Set Folder or File Permissions in Windows 10
Windows 10 uses essentially the same NTFS permission system, although the File Explorer interface may look different.
Method 1: File Explorer Security Settings
- Open File Explorer .
- Find the target file or folder.
- Right-click it.
- Select Properties .
- Click the Security tab.
- Select a user or group.
- Click Edit .
- Select the desired Allow or Deny permissions.
- Click Apply .
- Click OK .
This method works for both individual files and complete folders.
Method 2: Advanced Security Settings
- Right-click the file or folder.
- Select Properties .
- Open Security .
- Click Advanced .
- Review the existing permission entries.
- Select Add to create a new permission rule.
- Select Select a principal .
- Enter the desired Windows account or group.
- Choose the required access level.
- Specify whether the permission should apply to the folder, files, subfolders, or all applicable objects.
- Click OK .
- Click Apply .
You can also use this window to disable or modify permission inheritance.
Method 3: Change Ownership in Windows 10
- Open the item's Properties .
- Select Security .
- Click Advanced .
- Locate the Owner field.
- Click Change .
- Enter an administrator account.
- Select Check Names .
- Click OK .
- Apply the ownership change.
- Return to the Security tab and configure the required access permissions.
Method 4: Command Prompt with ICACLS
- Open Command Prompt as Administrator .
-
Check existing permissions:
icacls "C:\Example\Folder" -
Grant Read permission:
icacls "C:\Example\Folder" /grant Username:(R) -
Grant Modify permission:
icacls "C:\Example\Folder" /grant Username:(M) -
Grant Full Control only when necessary:
icacls "C:\Example\Folder" /grant Username:(F) - Use /T when you intentionally want to apply the change to the entire folder tree.
Method 5: Manage Shared Folder Permissions
If the folder is being accessed over a local network, Windows 10 also provides sharing controls.
- Right-click the folder.
- Select Properties .
- Open the Sharing tab.
- Click Advanced Sharing .
- Enable Share this folder .
- Click Permissions .
- Select the appropriate user or group.
- Choose Read , Change , or Full Control .
- Click Apply .
- Click OK .
Remember that network access can be affected by both share permissions and NTFS permissions . When both apply, the effective access is generally restricted by the more restrictive combination.
Windows 11 vs. Windows 10: Which Method Should You Use?
For everyday users, File Explorer > Properties > Security is usually the simplest solution.
For more advanced requirements:
- Use Advanced Security Settings for inheritance and ownership.
- Use Command Prompt and ICACLS for fast administrative changes.
- Use PowerShell for automation and large-scale permission management.
- Use Sharing settings when the folder needs to be accessed across a network.
- Use the principle of least privilege by giving users only the permissions they actually need.
Before changing permissions on system directories, create a backup or restore point where appropriate. Avoid granting Everyone – Full Control simply because it resolves an access-denied message; doing so can unnecessarily expose or modify sensitive data.
Final Thoughts
Setting file and folder permissions in Windows 11/10 gives users much greater control over privacy, collaboration, and system security. Whether you are protecting personal documents, creating a shared workspace, configuring a family computer, or administering multiple business accounts, Windows provides both straightforward graphical tools and powerful command-line options.
The best approach is to start with the simplest method that meets your needs. For most situations, the Security tab is sufficient. When permissions become more complex, Advanced Security Settings, ownership controls, ICACLS, and PowerShell provide the flexibility required for detailed Windows permission management.
Once you understand how users, groups, inheritance, ownership, NTFS permissions, and sharing permissions interact, you can configure access more precisely while avoiding unnecessary security risks. The goal should always be clear: give the right user the right level of access to the right files—nothing more and nothing less.