Troubleshooting Folder Permissions

  • Article

TS or audit folder access using the Effective Permissions tool built-in to Windows XP and Windows Server 2003.
To view effective permissions on files and folders:

  1. Open Windows Explorer, and then locate the file or folder for which you would like to view effective permissions.
  2. Right-click the file or folder, click Properties, and then click the Security tab.
  3. Click Advanced, click the Effective Permissions tab, and then click Select.I
  4. n Enter the object name to select (examples), enter the name of a user or group, and then click OK. The selected check boxes indicate the effective permissions of the user or group for that file or folder.

You must have permission to read the membership information. If the specified user or group is a domain object, you must have permission to read the object’s group information on the domain. Here are some relevant default domain permissions:

  • Domain administrators have permission to read membership information on all objects.
  • Local administrators on a workstation or stand-alone server cannot read membership information for a domain user.
  • Authenticated domain users can only read membership information when the domain is in Pre-Windows 2000 capability mode.

For more information about how to use the Effective Permissions tool, please review the following topic: View Effective Permissions on Files and Folders