21

On Windows Server 2003 - and some other versions of Windows - the Properties > Security tab of a folder's or file's context menu provides "Allow" and "Deny" options for "Full Control," "Modify," "Read" and other permissions:

Sample Windows permission window

After clicking "Full Control," all boxes in the column - except for "Special Permissions" - get automatically checked.

What's the difference between checking "Full Control" and simply checking all the other boxes individually? Are there hidden/advanced permissions toggled by "Full Control" that aren't listed in the main permissions window? Is "Full Control" just a convenience shortcut?

2 Answers 2

14

NTFS Permissions - Full control does provide additional permissions, most notably the ability to modify permissions on the object and take ownership.

1
  • Link no longer works. Jun 15, 2011 at 22:25
4

Giving Full Control to a user allows them to change permissions on the object themselves. Giving them everything else will allow them to modify, edit, delete, etc but they cannot change permissions unless they have Full Control or are explicitly granted it in the Advanced section.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .