As a member of the 'Administrators' group on Windows 7 (not in a domain), I launch explorer with admin rights (ctrl-shift). User profile folders on the system disk (like 'c:\users\murray') have 'Administrators' listed with 'full control'.
However I get 'access denied' when I try to open them. So on these folders we can't utilize the 'list folder / read data' right of our group's permission, but can only add a new, redundant permission entry for our user to be able to read data.
I'd expect users to have access on a folder their group has permissions on, without adding a permission entry for each member. I find it inappropriate because the way it works will result in numerous additional entries on some special folders over time (profile folders in our case).
So; what blocks the existing 'list folder / read data' permission of 'Administrators' members to these folders and where is this rule stored? Perhaps it's related with the 'simple' file sharing, ntfs junction points, UAC, or system policies?