Fix “Access Denied” Folder Errors with Ownership and Permissions in Windows 10/11

  • Start date Start date
  • Reading time 7 min read

Fix “Access Denied” Folder Errors with Ownership and Permissions in Windows 10/11​

Difficulty: Intermediate | Time Required: 15 minutes

Introduction​

Few Windows errors are more frustrating than opening a folder and seeing “Access Denied” or “You don’t currently have permission to access this folder.” This often happens after moving a drive from another PC, restoring files from backup, reinstalling Windows, copying old user-profile folders, or working with folders created by another account.
In Windows 10 and Windows 11, folder access is controlled by two related security settings:
  1. Ownership — who has authority to change permissions.
  2. Permissions — which users or groups can read, write, modify, or delete files.
This tutorial shows you how to take ownership of a folder and then grant your account the correct permissions using both File Explorer and command-line tools.
Important: Only change permissions on folders you own or are authorized to manage. Avoid changing permissions on protected Windows system folders unless you are following a trusted repair procedure.

Prerequisites​

Before you begin, make sure you have:
  1. A Windows 10 or Windows 11 PC.
  2. An administrator account.
  3. The full path of the folder causing the error.
  4. A backup of important files if the folder contains critical data.
This guide applies to supported Windows 10 and Windows 11 versions. The exact wording of buttons may vary slightly between builds, but the process is generally the same.

Step 1: Confirm the Folder Is Not in Use​

Before changing permissions, make sure the folder is not locked by an app or background process.
  1. Close any programs that may be using the folder.
  2. If the folder is on an external drive, make sure file transfers are complete.
  3. Restart your PC if you recently copied, moved, or restored the folder.
  4. Try opening the folder again.
If you still receive Access Denied, continue with the ownership steps below.

Step 2: Try the File Explorer “Continue” Prompt​

Sometimes Windows can add your account to the folder permissions automatically.
  1. Open File Explorer.
  2. Browse to the folder.
  3. Double-click the folder.
  4. If prompted with “You don’t currently have permission to access this folder”, select Continue.
  5. Approve the User Account Control prompt if asked.
If this works, Windows grants your account access to that folder. If it fails, or if you want more control over the permissions being applied, use the manual method below.
Note: Selecting Continue can permanently change the folder’s access control list. That is usually fine for personal data folders, but it may not be appropriate for application folders, shared folders, or company-managed systems.

Step 3: Take Ownership Using File Explorer​

Taking ownership gives your administrator account the ability to change permissions.
  1. Right-click the problem folder.
  2. Select Properties.
  3. Open the Security tab.
  4. Select Advanced.
  5. At the top of the Advanced Security Settings window, look for Owner.
  6. Select Change next to the current owner.
  7. Type your Windows username, Microsoft account email, or the group name Administrators.
  8. Select Check Names.
  9. If Windows resolves the name, select OK.
  10. Enable Replace owner on subcontainers and objects if you want ownership applied to all files and subfolders.
  11. Select Apply.
  12. If prompted, approve the administrator permission request.
  13. Select OK to close the dialogs.
You may need to close and reopen the folder properties window before the new owner appears correctly.
Tip: For personal folders, selecting your user account is usually best. For repair work on a shared administrator-managed folder, selecting the local Administrators group may be more appropriate.

Step 4: Grant Your Account Folder Permissions​

Ownership alone does not always give you access. After becoming the owner, you may still need to add permissions.
  1. Right-click the folder again.
  2. Select Properties.
  3. Open the Security tab.
  4. Select Advanced.
  5. Select Add.
  6. Select Select a principal.
  7. Enter your username and select Check Names.
  8. Select OK.
  9. Under Basic permissions, choose one of the following:
    • Read & execute if you only need to open files.
    • Modify if you need to edit, create, or delete files.
    • Full control if you need complete management access.
  10. Set Applies to to This folder, subfolders and files.
  11. Select OK.
  12. Back in Advanced Security Settings, select Apply.
  13. If prompted, allow Windows to apply the permissions to child items.
After this completes, try opening the folder again.
Warning: Avoid using Full control unless you really need it. For most personal data recovery situations, Modify is enough.

Step 5: Use Command Prompt if File Explorer Fails​

If the graphical method fails, use an elevated Command Prompt. This is often faster for folders containing many files.
  1. Select Start.
  2. Type cmd.
  3. Right-click Command Prompt.
  4. Select Run as administrator.
  5. Approve the UAC prompt.
Now run the following command, replacing the path with your folder path:
takeown /f "C:\Path\To\Folder" /r /d y
This takes ownership of the folder and its subfolders.
Next, grant your current user account full control:
icacls "C:\Path\To\Folder" /grant "%USERDOMAIN%\%USERNAME%:(OI)(CI)F" /t /c
What the command does:
  • /grant adds permissions for your account.
  • (OI) applies permissions to files inside the folder.
  • (CI) applies permissions to subfolders.
  • F means Full control.
  • /t applies changes recursively.
  • /c continues even if some files return errors.
When the command finishes, close Command Prompt and try opening the folder again.
Tip: If you only want Modify access instead of Full control, replace F with M in the icacls command.

Step 6: Re-Enable Inheritance When Appropriate​

If the folder was copied from another Windows installation, it may contain old permissions that no longer match your current PC. Re-enabling inheritance can make permissions cleaner.
  1. Right-click the folder.
  2. Select Properties.
  3. Open Security.
  4. Select Advanced.
  5. If you see Enable inheritance, select it.
  6. Select Apply.
  7. Choose to apply inherited permissions to child objects if prompted.
This allows the folder to inherit permissions from its parent folder, which is often the best long-term fix for normal user data.
Warning: Do not blindly reset inheritance on system folders, program folders, or folders managed by work/school policies.

Troubleshooting Notes​

The folder is on another user’s profile​

If the folder came from C:\Users\OldName, you may need to take ownership of only the specific subfolder you need, such as Documents, Pictures, or Desktop. Avoid changing permissions on the entire old profile unless necessary.

The folder is on an external drive​

External NTFS drives retain permissions from the previous Windows installation. Taking ownership and granting your account access usually resolves this.

The folder is on a network share​

Network access depends on both share permissions and NTFS permissions. If you do not control the server or NAS, you may need the administrator of that device to grant access.

The files are encrypted​

If the files were encrypted with Windows file encryption, changing ownership and permissions may not be enough. You may need the original encryption certificate or recovery key.

Some files still fail​

A few files may be in use, corrupted, protected, or have unusual permissions. Restart the PC and run the command again. If errors continue, check the drive for file system issues before making more permission changes.

You changed the wrong permissions​

If the folder should inherit default permissions from its parent, you can reset inherited ACLs with caution:
icacls "C:\Path\To\Folder" /reset /t /c
Use this only when you understand the impact, because it removes custom permissions and replaces them with inherited defaults.

Conclusion​

“Access Denied” folder errors are usually caused by mismatched ownership, missing permissions, or old security settings carried over from another Windows installation. By taking ownership first and then granting the correct permissions, you can regain access to personal files without reinstalling Windows or using third-party tools.
For most users, the File Explorer method is safest and easiest. For stubborn folders or large directory trees, takeown and icacls provide a reliable administrator-level repair path.
Key Takeaways:
  • Ownership controls who can change permissions.
  • Permissions control who can read, modify, or delete folder contents.
  • Use File Explorer first for a safer, visual approach.
  • Use takeown and icacls when the GUI method fails.
  • Avoid changing permissions on Windows system folders unless absolutely necessary.

This tutorial was generated to help WindowsForum.com users get the most out of their Windows experience.
 

Back
Top