Enable or Disable Inherited Permissions for Objects in Windows  

    Enable or Disable Inherited Permissions for Objects in Windows

    Enable or Disable Inherited Permissions for Objects in Windows

    Enable or Disable Inherited Permissions for Files and Folders in Windows
    Published by Category: User Accounts
    27 Sep 2017
    Designer Media Ltd


    Enable or Disable Inherited Permissions for Files and Folders in Windows

    information   Information
    On NTFS and ReFS volumes, you can set security permissions on files and folders. These permissions grant or deny access to the files and folders.

    Every container (ex: folder) and object (ex: file) on the PC has a set of access control information attached to it. Known as a security descriptor, this information controls the type of access allowed to users and groups. The security descriptor is automatically created along with the container or object that is created.

    When you are a member of a group (ex: "Administrators") that is associated with an object, you have some ability to manage the permissions on that object. For those objects you own, you have full control.

    Permissions are defined within an object's security descriptor. Permissions are associated with, or assigned to, specific users and groups. For example, for the file Temp.dat, the built-in Administrators group might be assigned Read, Write, and Delete permissions, while the Backup Operators group might be assigned Read and Write permissions only.

    Each assignment of permissions to a user or group is represented in the system as an access control entry (ACE). The entire set of permission entries in a security descriptor is known as a permission set or access control list (ACL). Thus, for a file named Temp.dat, the permission set includes two permission entries, one for the built-in Administrators group and one for the Backup Operators group.

    There are two types of permissions: explicit permissions and inherited permissions.
    • Explicit permissions are those that are set by default on non-child objects when the object is created, or by user action on non-child, parent, or child objects.
    • Inherited permissions are those that are propagated to an object from a parent object. Inherited permissions ease the task of managing permissions and ensure consistency of permissions among all objects within a given container.
      • Inherited Deny permissions do not prevent access to an object if the object has an explicit Allow permission entry.
      • Explicit permissions take precedence over inherited permissions, even inherited Deny permissions.

    By default, objects within a container inherit the permissions from that container when the objects are created. For example, when you create a folder called MyFolder, all subfolders and files created within MyFolder automatically inherit the permissions from that folder. Therefore, MyFolder has explicit permissions, while all subfolders and files within it have inherited permissions.

    Name:  Explicit_and_Inherited_permissions.jpg
Views: 68317
Size:  78.6 KB

    This tutorial will show you how to enable and disable inherited permissions for files and folders in Windows 7, Windows 8, and Windows 10.

    You must be an administrator to enable or disable inherited permissions.

    Note   Note
    Enabling or disabling inherited permissions for files and folders will not affect their current explicit permissions.

    If you are unable to enable or disable inherited permissions for a file or folder, then you will need to take ownership of the file or folder first, and try again. This can happen when you are not the owner, or you do not have read or write permissions.


    CONTENTS:
    • Option One: To Enable or Disable Inherited Permissions for File or Folder using Context Menu
    • Option Two:To Enable Inherited Permissions for File or Folder in Advanced Security Settings
    • Option Three: To Disable Inherited Permissions for File or Folder in Advanced Security Settings
    • Option Four: To Enable or Disable Inherited Permissions for File or Folder in Command Prompt





    Enable or Disable Inherited Permissions for Objects in Windows OPTION ONE Enable or Disable Inherited Permissions for Objects in Windows
    To Enable or Disable Inherited Permissions for File or Folder using Context Menu





    Enable or Disable Inherited Permissions for Objects in Windows OPTION TWO Enable or Disable Inherited Permissions for Objects in Windows
    To Enable Inherited Permissions for File or Folder in Advanced Security Settings

    1. While in File Explorer, right click or press and hold on the file or folder you want to enable inherited permissions for, and click/tap on Properties.

    2. Click/tap on the Security tab, and click/tap on the Advanced button. (see screenshot below)

    Name:  Enable_inheritance_for_file-1.png
Views: 67453
Size:  27.0 KB

    3. Click/tap on the Change permissions button if there. (see screenshot below)

    Name:  Enable_inheritance_for_file-1b.jpg
Views: 67351
Size:  60.8 KB

    4. Click/tap on the Enable inheritance button. (see screenshots below)

    Name:  Enable_inheritance_for_file-2.jpg
Views: 66945
Size:  59.1 KB Name:  Enable_inheritance_for_file-2A.jpg
Views: 67316
Size:  65.3 KB

    5. Click/tap on Apply to see the applied inherited permissions. (see screenshot below)

    Name:  Enable_inheritance_for_file-3.jpg
Views: 67017
Size:  59.6 KB

    6. You will now see the inherited permissions. Click/tap on OK. (see screenshot below)
    Note   Note
    If this is for a folder, then you could also check the Replace all child object permissions entries with inheritable permission entries from this object box first if wanted, click/tap on OK, and click/tap on Yes when prompted to confirm.

    Checking the box will remove explicit permissions of the child objects.


    Name:  Enable_inheritance_for_file-4.jpg
Views: 66972
Size:  80.9 KB Name:  Enable_inheritance_for_file-4a.jpg
Views: 67013
Size:  87.0 KB

    7. Click/tap on OK. (see screenshot below)

    Name:  Enable_inheritance_for_file-5.png
Views: 67107
Size:  27.1 KB






    Enable or Disable Inherited Permissions for Objects in Windows OPTION THREE Enable or Disable Inherited Permissions for Objects in Windows
    To Disable Inherited Permissions for File or Folder in Advanced Security Settings

    1. While in File Explorer, right click or press and hold on the file or folder you want to disable inherited permissions for, and click/tap on Properties.

    2. Click/tap on the Security tab, and click/tap on the Advanced button. (see screenshot below)

    Name:  Disable_inheritance_for_file-1.png
Views: 66969
Size:  30.3 KB

    3. Click/tap on the Disable inheritance button. (see screenshots below)

    Name:  Disable_inheritance_for_file-2.jpg
Views: 68564
Size:  81.5 KB Name:  Disable_inheritance_for_file-2A.jpg
Views: 69069
Size:  90.1 KB

    4. Do step 5 (convert inherited permissions) or step 6 (remove inherited permissions) below for what you want to do.


     5. Convert inherited permissions into explicit permissions on this object

    A) Click/tap Convert inherited permissions into explicit permissions on this object. (see screenshot below)

    Name:  Disable_inheritance_for_file-3.png
Views: 67078
Size:  18.6 KB

    B) Click/tap on OK, and go to step 7 below. (see screenshot below)

    Name:  Disable_inheritance_for_file-5.png
Views: 67178
Size:  112.8 KB


     6. Remove all inherited permissions from this object

    Note   Note
    Only explicit permissions (if available) will be left for this file or folder afterwards.


    A) Click/tap Remove all inherited permissions from this object. (see screenshot below)

    Name:  Disable_inheritance_for_file-3.png
Views: 67078
Size:  18.6 KB

    B) Click/tap on OK, and go to step 7 below. (see screenshot below)

    Name:  Disable_inheritance_for_file-4.png
Views: 66989
Size:  80.5 KB

    7. Click/tap on OK. (see screenshot below)

    Name:  Disable_inheritance_for_file-6.png
Views: 66979
Size:  24.0 KB






    Enable or Disable Inherited Permissions for Objects in Windows OPTION FOUR Enable or Disable Inherited Permissions for Objects in Windows
    To Enable or Disable Inherited Permissions for File or Folder in Command Prompt

    1. Open an elevated command prompt.

    2. Type the command below you want to use into the elevated command prompt, and press Enter. (see screenshots below)

    (Enable inheritance)
    icacls "Full path of file or folder" /inheritance:e

    OR

    (Disable inheritance and "Convert inherited permissions into explicit permissions on this object")
    icacls "Full path of file or folder" /inheritance:d

    OR

    (Disable inheritance and "Remove all inherited permissions from this object")
    icacls "Full path of file or folder" /inheritance:r

    Note   Note
    Substitute Full path of file or folder in the commands above with the actual full path of the file or folder you want to enable or disable inherited permissions for.

    For example: icacls "F:\MyFolder\Lock.png" /inheritance:e


    3. When finished, you can close the elevated command prompt if you like.

    Name:  Enable_inheritance_command.png
Views: 66915
Size:  16.7 KB
    Name:  Disable_inheritance_and_convert_inherited_permissions_command.png
Views: 66964
Size:  16.9 KB
    Name:  Disable_inheritance_and_remove_all_inherited_permissions_command.png
Views: 66937
Size:  21.8 KB


    That's it,
    Shawn


  1.    #1

    Help reverting to default settings


    I was trying to disable inherited permissions based on similar directions from another web page and something went haywire. All I had wanted to do was give Users (e.g. myself) Full Control (I had read somewhere this would fix an issue with Windows Voice Recorder not working). Anyway, as you can see by the screenshot, now I have duplicate entries for all these users. I want to revert to the default settings so I don't corrupt everything. Could someone let me know the best course of action? Under "Inherited from" should I
    1. remove all the entries that say "None"
    2. remove all the entries that say "K:" (the location of my Documents folder)
    3. leave everything alone?


    Thanks in advance. Click image for larger version. 

Name:	DRR Adv Permissions 2019-05-13.jpg 
Views:	16 
Size:	135.1 KB 
ID:	233588
    Last edited by druekberg; 1 Week Ago at 09:25. Reason: Edit a word
      My ComputerSystem Spec

  2. Brink's Avatar
    Posts : 38,860
    64-bit Windows 10 Pro build 18898
    Thread Starter
       #2

    Hello @druekberg,

    Normally, your Documents folder would only have "Inherited from" entries from your "K:\Ruekberg" folder by default.

    If you like, you can use the context menu in the tutorial below to make it easier to restore the default permission of your "Documents" folder, subfolders, and files.

    Add Reset Permissions to Context Menu in Windows
      My ComputersSystem Spec


 

Tutorial Categories

Enable or Disable Inherited Permissions for Objects in Windows Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


Related Threads
Hardware & Drivers Enable or Disable Microphone in Windows in Tutorials
How to Enable or Disable the Microphone in Windows When you are not using the microphone (mic) on your PC, you may want to disable it for privacy and security reasons, as it can get hacked and the hackers would be able to hear everything you...
User Accounts Enable or Disable Account in Windows 10 in Tutorials
How to Enable or Disable User Accounts in Windows 10 User accounts help control which files and apps each person can use and what changes they can make to the PC. If you have a user account that you want to make unavailable without deleting...
I'm certain I'm not the only person with this problem. Bluetooth is installed on my Samsung laptop running the latest version of Windows 10. Here's the problem: every so often a routine Windows update totally disables Bluetooth, or rather, prevents...
Performance & Maintenance Enable or Disable Boot Log in Windows in Tutorials
How to Enable or Disable the Boot Log in Windows In Windows, you can enable the boot log that includes a list of loaded and unloaded drivers during the boot process. This information can be useful when you are trying to troubleshoot related...
How to Enable or Disable Projecting to this PC in Windows 10 The Projecting to this PC feature uses the Connect app to allow you to wirelessly project your Windows Phone, another PC, or Android devices to the screen of this PC, and use its...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:47.
Find Us