Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I think I'm having some difficulty understanding NTFS permissions. My understanding is that when possible you want to avoid assigning a specific user account to NTFS and instead use a group. So I set up a folder with the owner as the administrators group. I removed all user accounts on the folder and added the administrators group with full control.

I'm logged into the computer as user that belongs to the administrators group. But when I open the security properties on the folder is says, "you must have read permissions to view the properties of this object." I can click Advanced and Continue and edit the properties, but unless I specifically add my user account to the permissions or make my user account the owner, I get the above message. Yet my account is part of the administrators group. Shouldn't those permissions propogate? Why would I have to assign my user account specifically, when I've assigned a group that my account belongs to? Thanks!

share|improve this question
Do you have User Account Control enabled on the client computer where you were testing? UAC strips your "Administrators" group membership. – Evan Anderson Jul 22 '14 at 15:26
Turned off UAC, rebooted, still no go. – skinneejoe Jul 22 '14 at 15:54
Have you tried using the Effective Permissions tab to see what permissions your user account has been granted? – dbr Jul 22 '14 at 16:34
Yes, and it says my account has full control. It seems like this behavior is by design, which is disappointing. – skinneejoe Jul 22 '14 at 19:16

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.