File permissions for NTFS volumes on computers running Microsoft Windows 2000. For information on file permissions on Windows NT versions 4 and earlier, refer to the entry on NTFS standard file permissions in this work.
File permissions govern access to files on an NTFS volume, while folder permissions govern access to folders on an NTFS volume. There are five standard file permissions on NTFS volumes for computers running Windows 2000: full control, modify, read & execute, read, and write.
For any given file on an NTFS volume, each of these file permissions can be allowed or denied for a specific user or group by using the Security tab of the file’s property sheet in Windows Explorer (see the illustration).
Each of these five standard file permissions is made up of a subset of the individual or special file permissions that are available on NTFS volumes on machines running Windows 2000. The following table lists the various special file permissions and how they are combined to form the five different standard file permissions.
If a group is granted full control folder permission on a folder, any member of the group can delete any files in that folder regardless of the file permissions.
Graphic F-11. File permissions (Windows 2000).
| Special Permissions | Full Control | Modify | Read & Execute | Read | Write |
| Execute file | x | x | x | ||
| Read data | x | x | x | x | |
| Read attributes | x | x | x | x | |
| Read extended attributes | x | x | x | x | |
| Create files/write data | x | x | x | ||
| Append data | x | x | x | ||
| Write attributes | x | x | x | ||
| Write extended attributes | x | x | x | ||
| Delete subfolders and files | x | ||||
| Delete | x | x | |||
| Read permissions | x | x | x | x | x |
| Change permissions | x | ||||
| Take ownership | x | ||||
| Synchronize | x | x | x | x | x |