Windows 10: NTFS Permission Confuse me

Full control: ModifyRead & execute: List folder contents:Read: Write: The write and read permission within the NFTS permission confuses me can you explain or simplify these permission in regards to a file and and folder please

:)

 

NTFS Permissions Confusion


I clearly do not understand NTFS permissions. Can someone please help eliminate my confusion.

When I am signed in to RAVEN\Clayton (local, standard account) and I check Properties->Security on D:\Users\Clayton\Utilities, I find:





To me this indicates that SYSTEM, RAVEN\Administrators, and RAVEN\Clayton (Owner) have Full Control. Clicking Advanced and looking at Effective Access for RAVEN\Admin (local, administrators account):





To me this indicates RAVEN\Admin (a member of RAVEN\Administrators) has Full Control on D:\Users\Clayton\Utilities. All this makes sense to me.

However, if I sign in as RAVEN\Admin and click on D:\Users\Clayton, I find:





If I try to look at Properties on D:\Users\Clayton, I get:





I simply do not understand this. If RAVEN\Administrators has Full Control on D:\Users\Clayton and all its children, then why does RAVEN\Admin (a member of RAVEN\Administrators) get permission errors? Makes zero sense to me.

 

xp ntfs permissions erased - help!

NEVER, ever, remove FULL CONTROL permissions in the Access Control Lists/rights priveleges from:

• Administators Group

• YOUR local Administrator User

• SYSTEM

on NTFS rights on your disks (via Explorer.exe rightclick properties menu, security tab) that use that filesystem, OR in the REGISTRY either, via rightclick on HIVES/KEYS permissions popup menu options...

(Sure way to lock yourself out, period, & I have done it myself early on w/ NTFS filesystems &/or the Registry before... only way to learn sometimes, is making mistakes!)

* Keep this in mind, those of you that start experimenting w/ security @ these 2 levels!

APK

P.S.=> Leaving them @ FULL POWER, in both areas, usually 9/10 times allows you to get back into your rig (logging on as your LOCAL ADMINISTRATOR USER, to fix it), & make alterations to rights/acl's as needed, to "get it right", eventually... especially when you're still learning/experimenting! apk

 

NTFS Permissions Confusion


OK, let me try to clarify. I may be fooling myself, but I believe I understand the difference between the Built-In Administrator account and an account belonging to the Administrators group. An Administrators account IS NOT the Administrator account. An Administrators account can elevate via UAC (Run as administrator) to gain the Administrator account security token.

I am beginning to wonder if this issue is specific to File Explorer (explorer.exe). Signed in as raven\admin, I can open an administrator command prompt and can read C:\Users\Clayton and any of its children:





However, even using runas to ensure that File Explorer has an elevated security token, when I try to access C:\Users\Clayton I still get an error:





Does this mean that File Explorer simply can not be run with an elevated security token and that permissions must be managed from an administrator command prompt only?