Windows 10: Recommended ntfs permissions for (internal) _data_ drive?

I've installed win 10 on my new SSD, c:
I had a drive in my old computer that has all my data, now d:

I changed the location of my documents/videos/pictures/music/etc to point to the appropriate d:/users/user/directory/ but immediately had permissions problems.

I'm logging in with a hotmail account. That account is now the owner of files/folders on the drive.

When I use a program it invariable cannot save/write new files unless I give the owner modify permissions. This is true for keepass, firefox and photoshop (among the many others I've probably yet to come across)

I always hesitate when I am having to grant permissions so I ask:
Is this normal behaviour for data directories? What should the permissions be?

I want things as safe as reasonably possible.

:)

 

Windows 10, Which File Permissions to protect Photos

Before setting permissions, it is necessary to know what the permissions do.

I have found a good starting link by searching for 'NTFS Permissions' which leads to several links explaining what each permission specifies.

Really good link is NTFS Permissions

 

Activesync dies on the PC requiring restart

http://support.microsoft.com/?kbid=909444



" Based on security changes implemented in MS05-051, Read level NTFS file system permission is required to the %windir%\registration folder. Default permissions include Read access for the Everyone group. If this configuration is changed, applications and
services may exhibit unexpected behavior. Organizations that have chosen to implement more restrictive NTFS security permissions should consider granting Read level permissions through group membership for users, applications, and services that require access
to COM functionality. We recommend that the default settings for the folder be used to avoid potential application compatibility. Extensive application compatibility testing is recommended for administrators who want to implement settings other than the default
settings. For more information about the issues that may be experienced by modifying permissions on system folders, click the following article number to view the article in the Microsoft Knowledge Base:

885409 (http://support.microsoft.com/kb/885409/) Security configuration guidance support

Besides NTFS permissions, Bypass Traversal permission is required. By default, this permission is granted to the Everyone group. As stated with NFTS permissions, users, applications, and services should be granted this permission through group membership.
For more information about the Bypass Traversal user right, click the following article number to view the article in the Microsoft Knowledge Base:

823659 (http://support.microsoft.com/kb/823659/) Client, service, and program incompatibilities that may occur when you modify security settings and user rights assignments
"

 

Did you use the process in File Explorer to change the location of those Folders? I believe there's a Tutorial on this Forum about how to do that. Did you then change preferences/options is the involved programs to point to that new location?

Tip: when mentioning where a file or Folder is located one would use the backslash \\\\ in the path. That is a standard that goes back quite a ways.

The forward slash //// is prevalent in URLs/Web addresses.

I'm reluctant to mention NTFS, usually is the formatting of the drive/s and not a program as we know it.

 

Hi Berton,

To change the location of the folders I went to the default location (e.g., c:\users\me\music), right clicked it, chose the location tab, replaced the existing with the new location on d: It appears to work as far as opening the correct directory (with files) when I click one of the default links in explorer.

Also, I changed the preferences in windows to use "d:"

Also, yes, I changed the preferences in programs to use the new location.

Sorry for the forward slashes ... don't know why I did that, I go back quite a ways too (too much linux lately I guess).

Also, I right clicked the d drive and changed the owner from default (system, I think it was) over to my login user (security>advanced>change owner with checkbox options).

Lastly, applied modify permissions to the drive for that user (instead of these 4: Read&Execute, List Folder Contents, Read, and Write)

I have had similar problems in the past with Win7 and have solved it in a similar way ... even though it made me feel a bit insecure making the blanket permission change.

The drive is primarily data storage: photos and videos I've taken, some music, minimal amounts of documents etc. The exception is that this also contains the 'downloads' directory wherein of course you can fine executables/archives on occasion, which would be executed on install.