Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On Windows Server 2003 - and some other versions of Windows - the Properties > Security tab of a folder's or file's context menu provides "Allow" and "Deny" options for "Full Control," "Modify," "Read" and other permissions:

Sample Windows permission window

After clicking "Full Control," all boxes in the column - except for "Special Permissions" - get automatically checked.

What's the difference between checking "Full Control" and simply checking all the other boxes individually? Are there hidden/advanced permissions toggled by "Full Control" that aren't listed in the main permissions window? Is "Full Control" just a convenience shortcut?

share|improve this question
up vote 11 down vote accepted

NTFS Permissions - Full control does provide additional permissions, most notably the ability to modify permissions on the object and take ownership.

share|improve this answer
Link no longer works. – Barry Brown Jun 15 '11 at 22:25
@Barry Fixed, thanks for the notification :) – Darth Android Jun 15 '11 at 22:29

Giving Full Control to a user allows them to change permissions on the object themselves. Giving them everything else will allow them to modify, edit, delete, etc but they cannot change permissions unless they have Full Control or are explicitly granted it in the Advanced section.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.