Windows Server 2003 Special Permissions
NTFS permissions include standard permissions and special permissions. The standard permissions are actually a combination of specific special permissions. The Standard NTFS permissions are as follows:
- Read – Allows a user to view the contents of a folder, of the contents of a file. The user cannot view the contents of subfolders.
- Write – Allows a user create files and folders, but not read the contents of any files and folders he did not create.
- Modify – A full combination of both Read and Write permissions. A user can also delete files within a folder that has this permission. She can also view the contents of subfolders.
- Read & Execute – The Read permission with the ability to read file and folder permissions, along with the contents of subfolders.
- List Folder Contents – The same as Read & Execute, without the ability to execute files.
- Full Control – Allows a user to read, execute, create, and delete data, along with the added ability to assign other user accounts permissions to the object.
Each of the standard permissions is actually composed of several Special Permissions. These permissions can be viewed or modified by clicking on the Advanced button. Windows .NET has added the additional Special Permissions to the permissions list in order to indicate any advanced permissions that have been assigned to the highlighted user. Special permissions can be used in combination with any standard permission to provide a more granular approach to file and folder security. With some research, you can determine which special permissions make up the standard permissions, as shown here.
|
Read
|
Write
|
List Folder Contents
|
Read & Execute
|
Modify
|
Full Control
|
|
| Traverse Folder/Execute file |
X
|
X
|
X
|
X
|
||
| List Folder/Read Data |
X
|
X
|
X
|
X
|
X
|
|
| Read Attributes |
X
|
X
|
X
|
X
|
X
|
|
| Read Extended Attributes |
X
|
X
|
X
|
X
|
X
|
|
| Create Files/Write Data |
X
|
X
|
X
|
|||
| Create Folders/Append Data |
X
|
X
|
X
|
|||
| Write Attributes |
X
|
X
|
X
|
|||
| Write Extended Attributes |
X
|
X
|
X
|
|||
| Delete Subfolders & Files |
X
|
|||||
| Delete |
X
|
X
|
||||
| Read Permissions |
X
|
X
|
X
|
X
|
X
|
|
| Change Permissions |
X
|
|||||
| Take Ownership |
X
|
