How to Grant Folder Permissions in Windows

This guide walks you through granting a specific user or group access to a folder on Windows. You’ll learn how to set up permissions using the Properties dialog, which works for both personal folders and shared network locations. Before starting, you’ll need an administrator account and the name of the user or group you want to grant access to.

What You’ll Need

• An administrator account on the Windows computer.
• The exact username or group name (e.g., JohnDoe or Sales Team).
• If the folder is on a network share, you’ll also need permission to change share permissions.

Step-by-Step

1. Locate the folder in File Explorer (Windows Explorer). Right-click it and select Properties.
2. In the Properties window, go to the Security tab. This tab shows the current permissions for the folder.
3. Click the Edit button to change permissions. If prompted by User Account Control (UAC), click Yes to allow the change.
4. In the Permissions dialog, click Add to open the Select Users or Groups window.
5. Type the name of the user or group in the Enter the object names to select box. You can type multiple names separated by semicolons. Click Check Names to verify the name is correct. If it resolves (underlines), click OK.
6. Back in the Permissions dialog, you’ll see the user or group you just added listed. In the Permissions for [user/group] section, check the boxes for the level of access you want to grant. Common choices:
   • Full control – Allows reading, writing, modifying, and deleting files and subfolders.
   • Modify – Allows reading, writing, and deleting, but not changing permissions.
   • Read & execute – Allows viewing and running files.
   • List folder contents – Allows seeing the folder’s contents.
   • Read – Allows viewing files but not changing them.
   • Write – Allows creating new files and subfolders.
7. Click Apply and then OK to close the dialogs.
8. If you want the permissions to apply to all subfolders and files inside, click Advanced on the Security tab, then check the box Replace all child object permission entries (or click Enable inheritance if it’s disabled). Click OK.

Common Mistakes

• Typing the username wrong – Windows is case-insensitive but typos lead to “object not found.” Use Check Names to verify.
• Not having administrator rights – You’ll get an access denied error when trying to change permissions.
• Granting too much access – Full control to everyone can be a security risk. Grant only the minimum needed.
• Forgetting to apply to subfolders – If you don’t replace child permissions, the new rule may not affect existing files inside.
• Confusing share permissions with NTFS permissions – For network shares, both must allow access. Share permissions are set in the Sharing tab.

Tips

• Use groups instead of individual users whenever possible – it’s easier to manage.
• For a folder that will be accessed over the network, set both NTFS and share permissions. The effective permission is the more restrictive of the two.
• If you’re unsure what a user needs, start with Read and increase later.
• Use the Effective Access tab in Advanced Security Settings to test what a specific user can do.
• Document your permission changes so you can troubleshoot later.

Troubleshooting

“Access is denied” when trying to open the folder.
Check that the user is listed in the Security tab and that the appropriate permission (e.g., Read) is granted. Also verify the user is not being blocked by a parent folder’s permissions.

User can’t access the folder over the network.
Check both NTFS permissions (Security tab) and share permissions (Sharing tab). The effective permission is the intersection of both. Also ensure the folder is shared and the user has network access.

“The object could not be found” when adding a user.
Double-check the username spelling. If it’s a Microsoft account, use the email address. For local accounts, use the account name. Click Locations to select the correct computer or domain.

Changes don’t take effect.
Sometimes Windows caches permissions. Ask the user to log off and back on, or restart the computer. Also verify you clicked Apply before closing.

Permission inheritance is grayed out.
This happens when the folder has inherited permissions from a parent. To change it, click Disable inheritance first, then you can edit.

Frequently Asked Questions

What’s the difference between “Read” and “Read & execute”?

Read & execute includes everything Read does, plus the ability to run executable files (like .exe or .bat). For most data folders, Read is sufficient.

Can I grant permission to a group I created?

Yes. You can create a local group using Computer Management, then add users to it. Then grant permissions to that group instead of individual users.

How do I remove a user’s permission?

Go to the Security tab, click Edit, select the user, and click Remove. Or uncheck the permissions you want to revoke.

What does “Full control” allow that “Modify” doesn’t?

Full control allows changing permissions and taking ownership of the folder. Modify allows reading, writing, and deleting but not changing security settings.

Do I need to be an administrator to change permissions?

Yes, you need administrative rights to modify NTFS permissions on most folders, especially system folders.

Why can’t I see the Security tab?

The Security tab appears on NTFS volumes. If the drive is formatted as FAT32 or exFAT, you won’t see it. Convert the drive to NTFS or use share permissions instead.

Related

• Handwriting Recognition in OneNote: How to Use It
• Get Workbook Path Only: 5 Quick Ways
• Beginner Dual Booting Mistakes: 7 to Avoid