Windows 8 and 8.1 Forums


Permissions - Allow or Deny Access to Users and Groups in Windows 8

  1. #1
    Permissions - Allow or Deny Access to Users and Groups in Windows 8

    Permissions - Allow or Deny Access to Users and Groups in Windows 8
    How to Allow or Deny Access Permissions to Users and Groups in Windows 8 and 8.1
    Published by Brink is online now
    01 Oct 2011
    Default Permissions - Allow or Deny Access to Users and Groups in Windows 8

    How to Allow or Deny Access Permissions to Users and Groups in Windows 8 and 8.1


    information   Information
    This will show you how to add, remove, allow, and deny users and groups access with "basic" and "advanced" permission settings of a file, folder, drive, or registry key in Windows 8.

    Note   Note
    When you set permissions of a folder or drive for a user or group, the newly created and current files and subfolders in the folder or drive will also inherit these permissions as well.

    If the folder is set to "Allow" permissions for a user in another folder, then you will need to do one of the following for the user to have access to it.

    Set the folder to be shared (step 9 at this link) by the other user.

    Create a shortcut of the folder, and move it into one the C:\Users\Public folder for the other user to access it from.

    If you are an administrator, create a shortcut of the folder and move it into one of the user's user folders (ex: Desktop) for them to access it from.

    Set permissions to "Allow" access for the parent folder (first folder in path) instead that includes the folder.
    warning   Warning
    I would highly recommend that you create a restore point before making changes to a file, folder, drive, or registry key permission settings. This way if you make a mistake and lock (access denied) yourself out of the item, you will be able to do a system restore at boot and select the restore point to undo the mistake.

    Be sure to not deny permissions to or remove your user account for the file, folder, drive, or registry key. Doing so could prevent you from having access to the item.

    Be sure to not deny permissions to the Everyone group for the file, folder, drive, or registry key. This will also include your user account.

    Be sure to not deny permissions to or remove TrustedInstaller, LOCAL SERVICE, RESTRICTED, SERVICE, or SYSTEM if listed. Doing so will prevent Windows 8 from having access, and will cause Windows 8 to not run properly afterwards.







    OPTION ONE
    Change Access Permissions in an Elevated Command Prompt


    NOTE: You could also type icacls /? in the elevated command prompt for a complete list of availble switches and options that you could use with the icacls command.


    1. If you have not already, you must be the owner of the file, folder, or drive, before you will be able to change access permissions for it.


    2. Open an elevated command prompt, and do step 3 or 4 below depending on what object you would like to grant permissions of users amd groups for.


    3. To Allow or Deny Permissions for a File in a Command Prompt

    A) In the elevated command prompt, type the command below and press Enter.

    NOTE: Substitute full path of file with the full path of the file that you want to set permissons for within quotes.
    Substitute user name or group with the name of the user account or group that you want to grant permission to within quotes.
    Substitute switch with a switch letter in the table below for what permission you would like to set
    .

    Switch Permission
    N Deny all access
    F Allow full access
    RX Read and execute access
    R Read only access
    W Write only access
    D Remove user or group for no access




    icacls "full path of file" /grant "user name or group":
    switch


    B) Go to step 5.


    4.
    To Allow or Deny Permissions for a Folder or Drive in a Command Prompt
    NOTE: This command will set permissions for the folder or drive, and all files and subfolders in the folder or drive.

    A) In the elevated command prompt, type the command below and press Enter.

    NOTE: Substitute full path of folder or drive with the full path of the folder or drive that you want to set permissons for within quotes.
    Substitute user name or group with the name of the user account or group that you want to grant permission to within quotes.
    Substitute switch with a switch letter in the table for what permission you would like to set
    .

    icacls "full path of folder or drive" /grant "user name or group":switch /T


    B) Continue on to step 5.



    5. When finished, close the elevated command prompt.







    OPTION TWO
    Change Access Permissions in Security Properties


    NOTE: This option only has basic permissions that can be set for the file, folder, drive, or registry key. For both basic and advanced permissions, see OPTION THREE below instead.


    1. If you have not already, you must be the owner of the file, folder, drive, or registry key before you will be able to change access permissions for it.


    2. Do step 3 or 4 below depending on what object you would like to take ownership of.


    3. To Change Access Permissions of a File, Folder, or Drive in Properties


    A) Right click on the file, folder, or drive that you want to grant a user or group permissions for, and click on Properties.


    B) Go to step 5.


    4. To Change Access Permissions of a Registry Key in Properties

    A) In the left pane of Registry Editor (regedit), right click on the registry key that you want to grant a user or group permissions for, and click on Permissions. (see screenshot below)


    Click image for larger version


    B) Continue on to step 5.


    5. In the Security tab, and click on the Edit button. (see screenshot below)


    Name:  Permissions-1_File_Folder_Drive.jpg
Views: 50337
Size:  69.4 KB



    6. If prompted by UAC, then click on Yes.


    7. Do step 8 or 9 below depending on if you need to add or remove a user or group. If you do not need to add or remove a user or group, then go to step 10 below.


    8. To Add a User or Group to Set Access Permissions of this Object for

    A) Click on the Add button. (see screenshot below)


    Name:  Permissions-2_Add.jpg
Views: 50016
Size:  63.0 KB


    B) Click on the Advanced button. (see screenshot below)


    Name:  Permissions-3_Add.jpg
Views: 49918
Size:  40.1 KB


    C) Click on the Find Now button. (see screenshot below)


    Name:  Permissions-4_Add.jpg
Views: 49932
Size:  57.1 KB


    D) At the bottom under the Name column, select a user (username) or group that you would like to set permissions of this object for, and click on OK. (see screenshot below)


    Name:  Permissions-5_Add.jpg
Views: 50056
Size:  85.9 KB


    E) Click on OK. (see screenshot below)

    Name:  Permissions-6_Add.jpg
Views: 49746
Size:  38.2 KB


    F) Go to step 10, or go to step 9 if you would also like to also remove a user or group.



    9. To Remove a User or Group to have No Access Permissions for this Object

    WARNING: This is if you do not want to have a user or group listed that does not currently have inherited permissions. Removing a user or group will also remove all access permissions for this object. See WARNING at the top of the tutorial.


    A) Select the user or group that you want to remove, and click on Remove. (see screenshot below)


    Name:  Permissions-7_Remove.jpg
Views: 49659
Size:  66.3 KB



    B) Continue on to step 10.



    10. Select a user or group that you want to change the permissions for, then check the Allow or Deny boxes for the items that you want to allow or deny permissions for the selected user or group. (see screenshot below)
    NOTE:
    Checking Deny will override a checked Allow. Checking Full Control will also check all items under it. See WARNING at the top of the tutorial.


    Name:  Permissions-8.jpg
Views: 49662
Size:  64.7 KB


    11.
    When finished, click on OK. (see screenshot above)


    12. If prompted, click on Yes. (see screenshot below)


    Name:  Permissions-9.jpg
Views: 49551
Size:  34.8 KB


    13. Click on OK. (see screenshot below step 5)









    OPTION THREE
    Change Access Permissions in Advanced Security Properties


    NOTE: This option has both basic and advanced permissions that can be set for the file, folder, drive, or registry key.



    1. If you have not already, you must be the owner of the file, folder, drive, or registry key before you will be able to change access permissions for it.


    2. Do step 3 or 4 below depending on what object you would like to take ownership of.


    3. To Change Access Permissions of a File, Folder, or Drive in Properties


    A) Right click on the file, folder, or drive that you want to grant a user or group permissions for, and click on Properties.


    B) Go to step 5.


    4. To Change Access Permissions of a Registry Key in Properties

    A) In the left pane of Registry Editor (regedit), right click on the registry key that you want to grant a user or group permissions for, and click on Permissions. (see screenshot below)


    Click image for larger version


    B) Continue on to step 5.



    5. In the Security tab, and click on the Advanced button. (see screenshot below)


    Name:  Ownership-1-File_Folder_Drive.jpg
Views: 49591
Size:  72.2 KB


    6. If here, click on the Change permissions button. If prompted by UAC, then click on Yes. (see screenshot below)


    Click image for larger version



    7. Do step 8 or 9 below depending on if you need to add or remove a user or group. If you do not need to add or remove a user or group, then go to step 10 below.



    8. To Add a User or Group to Set Access Permissions of this Object for

    A) Click on the Add button. (see screenshot below)


    Click image for larger version



    B) Repeat steps 8A to 8D in OPTION TWO above.


    C) Go to step 11.


    9. To Remove a User or Group to have No Access Permissions for this Object
    WARNING:
    This is if you do not want to have a user or group listed that does not currently have inherited permissions. Removing a user or group will also remove all access permissions for this object. See WARNING at the top of the tutorial.


    A) Select the user or group that you want to remove, and click on Remove. (see screenshot below)


    Click image for larger version


    B) Continue on to step 10.



    10. Select a user or group that you want to change the permissions for, then click on the Edit button. (see screenshot below)
    NOTE:If you have View instead of Edit, then that user or group has inherited permissions that should not be changed.


    Click image for larger version


    11. Select to set the Allow or Deny permission settings for this user or group. (see screenshot below)
    WARNING: What you have checked in Deny will override what you have checked in Allow. See WARNING at the top of the tutorial.



    Click image for larger version



    12. If this is for a folder, drive, or registry key, then select what you want it to apply to. (see screenshots below)
    NOTE: A file will not have this option.


    Click image for larger version
    Click image for larger version



    13. Select if you would like to Show advanced permissions or to Show basic permissions. (see screenshots below)
    NOTE: The available permission settings will vary depending on if this is a file, folder, drive, or registry key.


    Click image for larger version
    Click image for larger version

    Click image for larger version
    Click image for larger version

    Click image for larger version
    Click image for larger version



    14. Check the boxes for the permissions that you would like to set in the Allow or Deny section, and click on OK when finished. (see screenshots below step 13)
    WARNING: What you have checked in Deny will override what you have checked in Allow. See WARNING at the top of the tutorial.


    15. Click on OK to apply. (see screenshot below step 8A or 9A)


    16. If prompted, click on Yes. (see screenshot below)


    Name:  Permissions-9.jpg
Views: 49551
Size:  34.8 KB



    17. Click on OK. (see screenshot below step 5)




    That's it,
    Shawn




    Published by


    Brink's Avatar
    Administrator

    Join Date: Jul 2009
    Posts: 16,584



    Tutorial Tools


  2. #1



    Junior Member

    Join Date : Jun 2014
    Posts : 3
    windows 8 pro


    DEAR BRINK,WHILE MANIPULATING WITH SECURITY OPTIONS IN PROPERTIES OF C DRIVE,I ACCIDENTALLY DENIED ACCESS FOR ALL OPTIONS IN AUTHENICATED USERS,NOW I AM GETTING ACCESS DENIED FOR ALL FILES THOSE ARE LINKED WITH C DRIVE AND EVEN I COULDN'T ABLE TO CHANGE THE PERMISSIONS ALSO,FOR THAT I'M GETTING A DIALOG BOX WITH A WARNING i.e COULD NOT ACCESS CONTROL EDITOR .SO PLEASE FIND SOME SOLUTION ABOUT THIS AND SEND THAT THREAD TO ME.PLEASE GET ME SOME SOLUTION ABOUT THIS.
      My System SpecsSystem Spec

  3. #2
    Brink's Avatar

    Administrator



    Join Date : Jul 2009
    Posts : 16,584
    64-bit Windows 8.1 Enterprise (RTM)
    USA us texas


    Hello Anil, and welcome to Eight Forums.

    You might see if doing a system restore using a restore point dated before this happened may be able to undo it.
      My System SpecsSystem Spec

Permissions - Allow or Deny Access to Users and Groups in Windows 8
Similar Threads
Tutorial Forum
Can't Access Apps Software and Apps
Solved Access denied General Support
Winners of our Windows Anytime Upgrade Giveaway for Windows 7 Netbook users! Windows 8 News

Eight Forums Android App Eight Forums IOS App Follow us on Facebook