Windows Vista

Establishing File & Folder Permissions

When you set permissions, you are specifying what level of access users have to a folder and its files and what they can do within that folder (e.g., save, delete, or read files). In many cases, you will need to change the permissions to a file or folder.

For example, you can designate a special folder on the W: drive within your department's area called Incoming as a place where students can turn in their work. To do this, you will first need to create a new folder on the W: drive. By default, the new folder will inherit the same permissions as the parent folder, which will not allow students to submit their work, and may not allow students to access the folder. You will then need to allow students access to the new folder, and set permissions for the folder.

This document covers the following topics:

Standard Permission Types
Accessing the Properties Dialog Box
Granting Access to a File or Folder
Setting Permissions

Standard Permission Types

There are six standard permission types which apply to files and folders in Windows Vista:

Full Control
Modify
Read & Execute
List Folder Contents
Read
Write

Each level represents a different set of actions users can perform. The first three permission types on the list - Full Control, Modify, and Read & Execute - can be explained as low, moderate, and high levels of security. The other three types - List Folder Contents, Read, and Write - are more specialized permission types that provide customized levels of security. See the table below for more information.

HINT: For folders, you can also set your own permissions or create a variation of any of the standard permission levels. Within each of the permission levels are many possible variations. For information on some of these advanced options, refer to Advanced Folder Level Permissions.

The following table represents the available standard permission types:

Permission	Description
Full Control	Permits the user(s) to: View file names and subfolders Open files Navigate to subfolders View folder and file properties Add files and subfolders to the folder Change the folder's files Delete the folder and its files View and change permissions Take ownership of the folder and its files
Modify	Permits the user(s) to: View file names and subfolders Open files Navigate to subfolders View folder and file properties Add files and subfolders to the folder Change the folder's files View permissions
Read & Execute	Permits the user(s) to: View file names and subfolders Open files Navigate to subfolders View folder and file properties View permissions
List Folder Contents	Permits the user(s) to: View folders Open files Navigate to subfolders View folder properties View permissions
Read	Permits the user(s) to: View the file names and subfolder names Navigate to subfolders View folder and file properties View permissions Copy and view data in the folder's files
Write	Permits the user(s) to: Create folders Add new files Modify file properties View permissions

Accessing the Properties Dialog Box

When working with permissions in Windows Vista, you are required to work from the Properties dialog box. This dialog box for the file or folder you are working with can be accessed in a few steps.

On the Taskbar, right click START» select Explore
Windows Explorer opens.
Navigate to and select the folder or file you wish to adjust/view permissions for
Right click the folder or file » select Properties
The Properties dialog box appears.

Granting Access to a File or Folder

Before permissions can be set for a file or folder, the users, groups, or computers that will be allowed to access that file or folder need to be determined. Also, keep in mind that by default the same persons who have access to the "parent" folder (the folder which contains the new folder) also have access to the new folder, and vice versa. This may not be ideal. It is a simple process to grant access to other users for any folder you have created.

Access the Properties dialog box
Select the Security tab
Click EDIT...
The Permissions for [Folder Name] dialog box appears.
Click ADD...
The Select Users, Computers, or Groups dialog box appears.
In the Enter the object names to select text box, type the name of the user or group that will have access to the folder
EXAMPLE: 0231.engl.490.001 or username@uwec.edu.
HINT: You may type the beginning of the name and then click CHECK NAMES. The name will either be finished for you or a list of users beginning with those characters will display for you to select from.
Click OK
The Properties dialog box reappears.
Continue with Setting Permissions

Setting Permissions

Once you have granted a group or individual user access to a folder, you will need to set permissions for the new user(s). When you set permissions, you are specifying what level of access users have to the folder and the files within it.

Folder permissions can be changed only by the owner of the folder (i.e., the creator) or by someone who has been granted permission by the owner. If you are not the owner of the folder or have not been granted permission by the owner, all checkboxes will be gray. Therefore, you will not be able to make any changes until the owner grants you permission.

HINT: For folders you can also set your own permissions or create a variation of any of the standard permission levels. There are many possible variations in each permission level. For information on some of these advanced options, refer to Advanced Folder Level Permissions.

WARNING: Be careful about checking Deny for any permissions, as Denying permission overrides any other related Allowed permissions.

Access the Properties dialog box
Select the Security tab
The Group or user names section lists the users and/or groups that have access to the file or folder.
In the Group or user names section, select the user(s) you wish to set permissions for
In the Permissions section, use the checkboxes to select the appropriate permission level
Click OK
The new permissions are given to the selected user(s) or group(s).