This guide shows you how to check who has access to a shared folder on Windows and what level of permission they have (read, change, or full control). You’ll learn to view both the share-level and NTFS permissions, which together determine effective access. You only need a Windows PC and an account with permission to view the folder’s properties.
What You’ll Need
- A Windows PC (Windows 10 or 11 works for these steps).
- An account with at least read access to the shared folder.
- If the folder is on another computer, you need network access to that computer.
Step-by-Step
- Locate the shared folder. Open File Explorer (Win + E) and navigate to the shared folder. It might be on your own computer (e.g., C:\Users\Public\Shared) or on a network location (e.g., \\Server\SharedFolder).
- Open Properties. Right-click the folder and select Properties from the context menu.
- Go to the Sharing tab. In the Properties window, click the Sharing tab. This tab shows the network share settings.
- View Share Permissions. Click the Permissions button. A new window lists groups and users with share-level permissions. For each entry, you’ll see checkboxes for Full Control, Change, and Read.
- Check the Security tab for NTFS permissions. Close the share permissions window, then click the Security tab in Properties. This shows NTFS permissions, which are more granular. Select a user or group to see their allowed and denied permissions in the list below.
- Understand effective permissions. The actual access a user has is the intersection of share and NTFS permissions. For example, if share permissions allow “Change” but NTFS allows only “Read”, the user gets “Read”. To see a summary, click Advanced in the Security tab, then the Effective Access tab, and click Select a user to check.
Common Mistakes
- Only checking the Sharing tab. Share permissions alone don’t tell the full story; NTFS permissions on the folder itself also apply.
- Confusing “Everyone” with specific users. The “Everyone” group includes all users, including guests. If it’s present, it may grant more access than intended.
- Ignoring inherited permissions. NTFS permissions are often inherited from a parent folder. A user might have access because of inheritance, not because they’re explicitly listed.
- Assuming “Read” in share means read-only. NTFS permissions can still allow changes, so always check both.
Tips
- Use the Effective Access tab to see exactly what a user can do, avoiding guesswork.
- For quick checks, use the command line: open Command Prompt and type
net shareto see share permissions, oricacls "C:\path\to\folder"to see NTFS permissions. - If you’re an administrator, you can use Computer Management (right-click Start > Computer Management) > Shared Folders > Shares to view all shared folders and their permissions from one place.
- Remember that if a user is denied in either share or NTFS, the denial overrides any allowed permission.
Troubleshooting
- No Sharing tab: If you don’t see a Sharing tab, the folder might not be shared. Right-click the folder, go to Properties > Sharing > Share… to share it first.
- Permissions button is grayed out: This happens when you don’t have permission to change share permissions. You need to be an administrator or have been granted permission to modify them.
- Can’t see the Security tab: The Security tab is hidden on drives formatted with FAT32 or exFAT. Convert the drive to NTFS to use NTFS permissions.
- Network folder doesn’t show Properties: If you’re accessing a network share and can’t open Properties, you may not have permission to view permissions. Ask the folder owner to grant you read access to the share’s properties, or check with your IT department.
- Effective Access shows “Cannot compute”: This can happen if the folder is on a network share and the computer can’t contact the domain controller. Try again later or check network connectivity.
Frequently Asked Questions
What’s the difference between Share and NTFS permissions?
Share permissions apply only when accessing the folder over the network. NTFS permissions apply both locally and over the network and offer more detailed control (like read, write, execute, delete). The effective permission is the more restrictive of the two.
Can I view permissions without being an administrator?
Yes, you can view permissions if you have at least read access to the folder. However, to change permissions, you typically need to be an administrator or the folder owner.
Why does the “Everyone” group appear in permissions?
“Everyone” is a special group that includes all users, including anonymous ones. It’s often added by default when sharing a folder, but it’s generally safer to remove it and add specific users or groups instead.
How do I see permissions for a user who isn’t listed?
In the Security tab, click Edit, then Add…, type the username, and click Check Names. Then you can view or set their permissions. For effective access, use the Advanced > Effective Access tab and select the user.
What does “Full Control” actually allow?
Full Control allows the user to read, write, modify, execute, delete, and change permissions on the folder and its contents. It’s the highest level of access and should be granted sparingly.
Can I view permissions from the command line?
Yes. Use net share to see share permissions, and icacls "C:\path\to\folder" to see NTFS permissions. For a more detailed view, use icacls "C:\path" /list.
Related
General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.
More in this bed
- How to Limit Mobile Data Usage on Android
- How to Recover Deleted Voicemail on Android
- Check If a Game Is Installed on a Samsung Phone
- Error 0x80070522 Required Privilege Not Held: Fix
- How to Make a Family Tree in Excel
- Fix Hades Crashing on Windows 10