Windows 7 - Permissions - Allow or Deny Users and Groups

   Information

This will show you how to allow or deny users and groups permission to have full control, modify, read & execute, list folder contents, read, or write to either a file, folder, drive, or registry key in Windows 7 or Vista.

   Note

• When you set permissions of a folder or drivefor a user or group, the newly created and current files and subfolders in the folder or drive will also inherit these permissions as well.
• If the folder is set to "Allow" permissions for a user in another folder, then you will need to do one of the following for the user to have access to it.
  • Set the folder to be shared (step 9 at this link) by the other user.
  • Create a shortcut of the folder, and move it into one the C:\Users\Public folder for the other user to access it from.
  • If you are an administrator, create a shortcut of the folder and move it into one of the user's user folders (ex: Desktop) for them to access it from.
  • Set permissions to "Allow" access for the parent folder (first folder in path) instead that includes the folder.

   Warning

I would highly recommend that you create a restore point before making changes to a file, folder, drive, or registry key permission settings. This way if you make a mistake and lock (access denied) yourself out of the item, you will be able to do a system restore at boot and select the restore point to undo the mistake.

• Be sure to not deny permissions to or remove your user account for the file, folder, drive, or registry key. Doing so could prevent you from having access to the item.
• Be sure to not deny permissions to the Everyone group for the file, folder, drive, or registry key. This will also include your user account.
• Be sure to not deny permissions to or remove TrustedInstaller, LOCAL SERVICE, RESTRICTED, SERVICE, or SYSTEM if listed. Doing so will prevent Windows 7 from having access, and will cause Windows 7 to not run properly afterwards.

1. To Change the Permissions of a File, Folder, or Drive

A) In Windows Explorer, right click on the file, folder, or drive that you want to change the permissions of and click on Properties.

B) Click on the Security tab, and click on the Edit button. (see screenshot below)

C) If prompted by UAC, then click on Yes (Windows 7) or Continue (Vista)

D) Go to step 3, 4, or 5.

2. To Change the Permissions of a Registry Key

A) In the left pane of Registry Editor (regedit.exe), right click on the key that you want to change the permissions of and click on Permissions. (see screenshot below)

B) Go to step 3, 4, or 5.

3. To Remove a User or Group
NOTE: This step is if you do not want to have a user or group listed that does not have inherited permissions. Removing a user or group will also remove all permissions set for it. See WARNING at top of tutorial.

A) Select the user or group, and click on Remove. (see screenshot below)

B) If you get this, then the user or group has inherited permissions and is recommended to not be removed. Click on OK. (see screenshot below)

4. To Add a User or Group
NOTE: This step is if a user or group that you wanted to set allow or deny permission settings for is not listed.

A) Click on the Add button. (see screenshot below)

   Note

If the permission settings are grayed out, then it means that you will need to take ownership of this file, folder, or drive first.

B) Click on the Advanced button. (see screenshot below)

C) Click on the Find Now button. (see screenshot below)

D) In the bottom pane under Search results, select the user(s) and/or group(s) that you want to add and click on OK. (see screenshot below)
NOTE: You can press and hold the CTRL key to select more than one listed item.

E) Click on OK. (see screenshot below)

5. To Allow or Deny Permissions for a User or Group
NOTE: Checking Deny will override a checked Allow. Checking Full Control will also check all items under it. See WARNING at top of tutorial.

A) Check the Allow or Deny boxes for the items that you want to allow or deny permissions for the selected user or group. (see screenshot below)

6. When finished, click on OK. (see screenshots above)

7. Click on OK. (see screenshot below step 1B)