In Windows 7, the padlock overlay icon on a file or folder indicates that the item is shared with nobody, which is to say, the item can only be accessed by a single user (with exceptions). Consequently, if you can access a folder that has a golden lock, you are likely the only user who may access that item on your PC. A more technical definition follows.
Criteria determining whether an item features a golden lock icon overlay:
- The item must have zero or only a single allow Access Control Entry (ACE) specifying any user. Exceptions: allow ACEs that apply to “This folder only” or “Files only”.
- The item must not have any group allow ACEs. Exceptions: the ‘Administrators’ group, and allow ACEs that apply to “This folder only” or “Files only”.
- The immediate parent folder must have at least one group allow ACE. Exceptions: the ‘Administrators’ group, and allow ACEs that apply to “This folder only” or “Files only”.
- Finally, your user account must be the user that satisfies condition 1, OR
- you must be the owner of the item, OR
- the item must include an ‘Administrators’ ACE with the ‘Read permission’ access right, and Explorer must be running elevated.
In short, the golden padlock denotes a private item that resides in a public folder.
Note that ‘NT Authority\SYSTEM’ and ‘NT Service\TustedInstaller’ should not be confused as users or groups. The former is a special Windows identity while the latter is a service.
This tutorial will show you how to remove or restore the
lock icon overlay on
files and folders for all users
without altering any sharing settings or neutralising any of the conditions above in
Windows 7.
You must be logged in as an
administrator to be able to do the steps in this tutorial.