Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Anyone know of a good resource for all of the values and definition in the windows explorers file attribute column?

share|improve this question
Something like this answer over on Server Fault? – squillman Sep 21 '09 at 22:50
up vote 16 down vote accepted

R = Read-Only: Most software, when seeing a file marked read-only, will refuse to delete or modify it. This is pretty straight-forward. For example, DOS will say "Access denied" if you try to delete a read-only file. On the other hand, Windows Explorer will happily munch it. Some will choose the middle ground: they will let you modify or delete the file, but only after asking for confirmation.

H = Hidden: This one is pretty self-explanatory as well; if the file is marked hidden then under normal circumstances it is hidden from view. DOS will not display the file when you type "DIR" unless a special flag is used, as shown in the earlier example.

S = System: This flag is used to tag important files that are used by the system and should not be altered or removed from the disk. In essence, this is like a "more serious" read-only flag and is for the most part treated in this manner. It is also a "super-hidden" attribute. Even if you enable “Show hidden files”, system files will not be displayed. (You can display them by disabling “Hide protected operating system files.”)

D = Directory: This is the bit that differentiates between entries that describe files and those that describe subdirectories within the current directory. In theory you can convert a file to a directory by changing this bit. Of course in practice, trying to do this would result in a mess--the entry for a directory has to be in a specific format.

A = Archive: This is a special bit that is used as a "communications link" between software applications that modify files, and those that are used for backup. Most backup software allows the user to do an incremental backup, which only selects for backup any files that have changed since the last backup. This bit is used for this purpose. When the backup software backs up ("archives") the file, it clears the archive bit (makes it zero). Any software that modifies the file subsequently, is supposed to set the archive bit. Then, the next time that the backup software is run, it knows by looking at the archive bits which files have been modified, and therefore which need to be backed up. Again, this use of the bit is "voluntary"; the backup software relies on other software to use the archive bit properly; some programs could modify the file without setting the archive attribute, but fortunately most software is "well-behaved" and uses the bit properly. Still, you should not rely on this mechanism absolutely to ensure that your critical files are backed up.


Missing from the above list:

C = Compressed: compressed files/folder cannot be encrypted.

E = Encrypted: encrypted files/folders cannot be compressed.


L = Reparse Points


P = Sparse File

I = Not content indexed


Combinations are possible, e.g., HSA = Hidden, System, Archive

share|improve this answer
I thought the filesystem layer hides all 'Volume label' entries? How can they appear in Explorer? – grawity Sep 23 '09 at 16:44
that's right, Volume Label entries certainly don't appear in Windows Explorer. i'll edit the answer accordingly. – Molly7244 Sep 23 '09 at 17:05
You forgot "T" for "Temporary" – AndrewJacksonZA May 16 '12 at 7:07
A file needs to have both the Hidden and System attribute to be "super-hidden". The System attribute alone is not enough. – Medinoc Jan 28 '15 at 10:03

I haven't found this on the internet yet, but there is also a "P" attribute, corresponding to a sparse file. This flag is listed in Windows 7, but not in Windows XP. Not sure about Vista.

You can turn a file sparse with the fsutil sparse setflag FILENAME command, and see the flag appear in Explorer. Note that there is no way to turn off the flag, though!

Sparse files are similar to compressed files, but a bit more specific. With sparse files, long ranges of null (value 0) bytes are simply not stored on disk. When a program tries to access that part of the file, the file system will see that it is not on the disk and return a range of null bytes instead. See this MSDN page for more info on sparse files.

share|improve this answer

The "I" flag stands for "Indexed". Indexing Service or Windows Search won't include those files in their indexing operation when set.


share|improve this answer
Let-  Bit   
ter   masks Description and notes
--- ------- ------------------------------------------------------------------
 R      0x1 Read-only
 H      0x2 Hidden
 S      0x4 System
(V)     0x8 Volume label (obsolete in NTFS and must not be set)
 D     0x10 Directory
 A     0x20 Archive
 X     0x40 Device (reserved by system and must not be set)
 N     0x80 Normal (i.e. no other attributes set)
 T    0x100 Temporary
 P    0x200 Sparse file
 L    0x400 Symbolic link / Junction / Mount point / has a reparse point
 C    0x800 Compressed (flag changable with directories only)
 O   0x1000 Offline
 I   0x2000 Not content indexed (displayed as 'N' in Explorer in Windows Vista)
 E   0x4000 Encrypted
(V)  0x8000 Integrity (Windows 8 ReFS only; attribute not displayed in Explorer)
 -  0x10000 Virtual (reserved by system and must not be set)
(X) 0x20000 No scrub (Windows 8 ReFS only; attribute not displayed in Explorer)

Attributes shown in Windows Explorer: RHSDAXNTPLCOIE ('X'=Device)

Attributes shown in 'attrib' command output: "A SHR I VX" ('V'=Integrity; 'X'=No scrub)

Attributes shown in "%~a1" (FOR %%I IN (files) DO ECHO.%%~aI) output: "drahscotl-x" ('X'=No scrub)

The authoritative reference of NTFS file attributes:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.