Folder Access Denied? Fix Windows Permissions

If you see “Folder access denied” in Windows, it usually means your user account lacks the NTFS permissions or ownership needed to open that folder. You can fix it by taking ownership of the folder and granting your account full control, or by checking for encryption, hidden shares, or a locked file.

Why Windows Blocks You

Windows uses two independent permission systems: NTFS permissions (set on the folder itself) and share permissions (set on network shares). A folder can be inaccessible if either set denies you. Even if you are an administrator, Windows applies a special “Administrators” token that is filtered (UAC), so you may not have effective rights until you elevate.

Common causes for “access denied”:

You don’t own the folder (e.g., it was created by another user or after a Windows reinstall).
Your account is not listed in the security tab, or is listed with “Deny”.
The folder is encrypted with EFS (Encrypting File System) and you don’t have the certificate.
The folder is on a network share with restrictive share permissions.
Antivirus or ransomware protection is blocking access.
The folder is in use by another process (e.g., a file is locked).

How to Take Ownership (Step-by-Step)

Taking ownership changes the folder’s owner to your account, which then allows you to change permissions. This works on Windows 10 and 11 for any local folder (not system-protected ones).

Right-click the folder and select Properties.
Go to the Security tab and click Advanced.
Next to Owner, click Change.
Type your username (or Administrators) and click Check Names, then OK.
Check the box Replace owner on subcontainers and objects.
Click OK, then when prompted, click OK again to close properties.
Reopen Properties → Security → Advanced, and click Add.
Click Select a principal, type your username, and grant Full control.
Check Replace all child object permission entries and click OK.

If you get an error during this, boot into Safe Mode and try again, or use the command line method below.

Command Line Fix (takeown and icacls)

For advanced users, the command line is faster and often works when the GUI fails. Open Command Prompt as Administrator and run:

takeown /f "C:\path\to\folder" /r /d y
icacls "C:\path\to\folder" /grant %USERNAME%:(OI)(CI)F /t

The takeown command makes you the owner of the folder and all subfolders (/r recursive). Then icacls grants your user full control (F) with inheritance flags (OI) (object inherit) and (CI) (container inherit). If you get “Access is denied” even as admin, you may need to use the /f flag to force, or check if the folder is encrypted.

Encrypted Files and EFS

If the folder is encrypted with EFS, taking ownership won’t help because the data is encrypted with a certificate tied to the original user account. You will need the original user’s certificate and password. If you don’t have it, the data is effectively unrecoverable. To check if a folder is encrypted, right-click → Properties → General → Advanced → see if “Encrypt contents to secure data” is checked. If it is, you must decrypt it with the correct certificate, or restore from backup.

Common Problems and Quick Checks

Before going deep into permissions, try these quick checks:

Reboot the computer – sometimes a file handle is stuck.
Check if the folder is actually a junction or symbolic link – right-click → Properties → see the “Target” field.
Disable antivirus temporarily (if safe) and try again.
Check if the folder is on a network drive – if so, ask the network admin for share permissions.
Try accessing via the full path (e.g., \?\C:\folder) to bypass long-path issues.

If the folder is on an external drive formatted with a different file system (e.g., ext4 from Linux), Windows may show access denied because it doesn’t support that file system natively. You would need a third-party driver or to copy the data on a compatible system.

When to Use Advanced Security Settings

The Advanced Security Settings window (Properties → Security → Advanced) shows the effective permissions for a specific user. Click “Effective Access” and select your user to see exactly what rights you have. This is useful for diagnosing why you still can’t access a folder after taking ownership. If effective access shows “Full control” but you still get denied, the issue is likely a file lock, antivirus, or a corrupted ACL. In that case, try renaming the folder (if possible) or moving it to a different location to reset the ACL.

Frequently Asked Questions

Why can’t I take ownership of a system folder?

System folders like C:\Windows or Program Files are protected by Windows Resource Protection (WRP). Even administrators cannot modify them without taking ownership of the specific file, which is risky. If you need to edit a system file, it’s better to use the intended method (e.g., Group Policy, Registry) rather than force ownership, as that can break Windows.

What does “Access denied” mean on a USB drive?

It usually means the drive is formatted with a file system Windows doesn’t fully support (like exFAT with permissions or ext4), or the drive has a hardware write-protect switch. Check the switch, and if the drive is NTFS, take ownership as described above.

Can I fix access denied without admin rights?

No. Changing permissions requires administrator privileges. If you don’t have admin rights, contact your IT department or the person who set up the computer. They can grant you access or reset the permissions.

Will taking ownership delete my files?

No, taking ownership only changes the security descriptor. Your files remain intact. However, if you replace permissions on child objects, you might remove other users’ access, so be careful on shared computers.

Why does the folder show a lock icon but I can still open it?

A lock icon usually means the folder is encrypted with EFS or is part of a protected system. If you can open it, you have the decryption key. If you can’t, you need the certificate.

What if I get “You have been denied permission to access this folder” when copying?

This often happens when copying from a read-only location like a CD or a protected system folder. Try copying the files to a new folder you created, or use robocopy with the /B (backup) flag if you have admin rights.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.

More cards in this drawer

The whole Numbers and Powers drawer →