How do I fix access permissions?

If you had to change the permissions of files and folders in Windows 11/10 for some reason, and if you want to reset the permissions to default, this post will help you. One of the users reported that he had to set the ownership and permissions to everyone and full control for a specific task, and now that it’s done, getting back to the default permission is difficult. Since the option is not built into the system, we will have to use the secedit  and icacls commands to reconfigure.

How to reset File & Folder permissions to default

Security is essential, and it is not just that other users can access the files, but programs you install on the computer also get the same access.  The good news is that fixing the permissions to default is easy, and all you need is to run a command-line program to fix it. Before going ahead, create a system restore point, so in case things go wrong, you can restore.

1. Run icacls command
2. Run Secedit command

You will need admin permission to execute the commands.

1] Run icacls command

Another method to resolve this using the icacls command. However, you will need first to take ownership of the folder and then execute the command. Windows uses the Access Control List to configure permissions for all files and folders. Icacls is a command-line utility that can display and modify the permissions on specified files and apply them.

It comes with a reset option that replaces ACLs with default inherited ACLs for all matching files. We will use the following options to reset

• t—Operates on all specified files in the current directory and its subdirectories.
• q—Suppresses success messages.
• c—Continues the operation despite any file errors. Error messages will still be displayed.

Next, run the following on an elevated command prompt—

icacls * /t /q /c /reset

Once done, you must save the permission into a file that you can use again later or apply to other computers.

2] Run Secedit command

It allows you to configure and analyze system security by comparing the current config with a template.

Configures and analyzes system security by comparing your current security configuration against specified security templates.

Type CMD in the Run (Win +R) prompt and then press Shift + Enter to open it with admin permission

Execute the following command-

secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose

You may get some warning, but you can safely ignore it.

Changing permission on Windows is tricky because there is no way to switch back to default permission once you change it. It should have been there right from the start and let Windows users fix it themselves.

I hope these commands were useful and helped you reset file & folder permissions to default in Windows.

Each level represents a different set of actions users can perform. See the table below for more information.

For folders you can also set your own unique permissions or create a variation on any of the standard permission levels. Within each of the permission levels are many possible variations. For information on some of these advanced options, refer to Advanced Folder Level Permissions below.

The following table represents the available standard permission types.

• view file name and subfolders.
• navigate to subfolders.
• view data in the folder's files.
• add files and subfolders to the folder.
• change the folder's files.
• delete the folder and its files.
• change permissions.
• take ownership of the folder and its files.

• view the file names and subfolders.
• navigate to subfolders.
• view data in the folder's files.
• add files and subfolders to the folder.
• change the folder's files.
• delete the folder and its files.
• open and change files.

• view file names and subfolder names.
• navigate to subfolders.
• view data in the folder's files.
• run applications.

• view the file names and subfolder names.
• navigate to subfolders.
• view folders.
• does not permit access to the folder's files.

• view the file names and subfolder names.
• navigate to subfolders.
• open files.
• copy and view data in the folder's files.

• create folders.
• add new files.
• delete files.

Create a New Folder

In many cases you will need to create a new folder. If you are using an existing folder and do not wish to create a new folder, continue with Accessing the Properties Dialog Box.

1. Click on the Start menu.
2. Click Computer.
3. From the Computer window, select the shared drive for your area or department (S Drive or W Drive).
4. Navigate to the location you want the new folder to appear (e.g., within one of your existing folders).
5. On the menu bar, select New Folder.
   OR
   Right click » select New » select Folder.
   A new folder is created which inherits the security permissions of its "parent."
   
6. In the newly created folder, type the desired folder name.
7. Press [Enter] or click off of the folder.

Accessing the Properties Dialog Box

When working with permissions in Windows 7, you are required to work from the Properties dialog box. This dialog box for the file or folder you are working with can be accessed in a few steps.

1. Click on the Start menu.
2. Click Computer.
3. Select the folder or file you wish to adjust/view permissions for.
4. Right-click the folder or file.
5. Select Properties.
   The Properties dialog box appears.

Granting Access to a File or Folder

After creating a new folder, or even if you will use an existing folder, you will need to determine who will have access to it. Also, keep in mind that by default the same persons who have access to the "parent" (original) folder also have access to the new folder, and vice versa. This may not be ideal. It is a simple process to grant access to specific users for any folder you have created.

1. Access the Properties dialog box.
2. Select the Security tab.
   
   
   
   
3. Click Edit.
   The security tab opens in a new window.
   
4. Click Add...
   The Select Users, Computers, or Groups dialog box appears.
   
   
   
   
5. In the Enter the object names to select text box, type the name of the user or group that will have access to the folder (e.g., 2125.engl.498.001 or [email protected]).
   HINT: You may type the beginning of the name and then click Check Names. The name will either be resolved or a list of users beginning with those characters will display for you to select from.
   
6. Click OK.
   The Properties dialog box reappears.
   
7. Click OK on the Security window.
8. Continue with Setting Permissions below.

Setting Permissions

Once you have granted a group or individual user access to a folder, you will need to set permissions for the new user(s). When you set permissions, you are specifying what level of access a user(s) has to the folder and the files within it. Be careful about checking Deny for any permissions, as the Deny permission overrides any other related to Allow permissions.

Folder permissions can be changed only by the owner of the folder (i.e., the creator) or by someone who has been granted permission by the owner. If you are not the owner of the folder or have not been granted permission by the owner, all checkboxes will be gray. Therefore, you will not be able to make any changes until the owner grants you permission.

1. Access the Properties dialog box.
2. Select the Security tab.
   The top portion of the dialog box lists the users and/or groups that have access to the file or folder.
   
3. Click Edit
   
   
   
   
4. In the Group or user name section, select the user(s) you wish to set permissions for
5. In the Permissions section, use the checkboxes to select the appropriate permission level
6. Click Apply
7. Click Okay
   The new permissions are added to the file or folder.

Advanced Folder Level Permissions

When you set permissions, you specify what users are allowed to do within that folder, such as save and delete files or create a new folder. You are not limited to choosing one of the standard permissions settings (Full Control, Modify, Read & Execute, List Folder Contents, Read, or Write). Instead of choosing one of these settings, you may set your own unique permissions based on what you would like users to be able to do. For an understanding of how options can be combined, refer to Permission Types: An Overview.

Remember, folder permissions can only be changed by the owner of the folder (i.e., the creator) or by someone who has been granted permission by the owner. If you are not the owner of the folder or have not been granted permission by the owner, the checkboxes will be grayed out. Therefore, you will not be able to make any changes until the owner grants you permission.

How do you reset permissions?

Why does it say you don't have permission to access?

How do I grant access permissions?

How do I restore all permissions?