Fix “Access Denied” Folder Errors with Ownership and Permissions in Windows 10/11
Difficulty: Intermediate | Time Required: 15 minutesIntroduction
Few Windows errors are more frustrating than opening a folder and seeing “Access Denied” or “You don’t currently have permission to access this folder.” This often happens after moving a drive from another PC, restoring files from backup, reinstalling Windows, copying old user-profile folders, or working with folders created by another account.In Windows 10 and Windows 11, folder access is controlled by two related security settings:
- Ownership — who has authority to change permissions.
- Permissions — which users or groups can read, write, modify, or delete files.
Important: Only change permissions on folders you own or are authorized to manage. Avoid changing permissions on protected Windows system folders unless you are following a trusted repair procedure.
Prerequisites
Before you begin, make sure you have:- A Windows 10 or Windows 11 PC.
- An administrator account.
- The full path of the folder causing the error.
- A backup of important files if the folder contains critical data.
Step 1: Confirm the Folder Is Not in Use
Before changing permissions, make sure the folder is not locked by an app or background process.- Close any programs that may be using the folder.
- If the folder is on an external drive, make sure file transfers are complete.
- Restart your PC if you recently copied, moved, or restored the folder.
- Try opening the folder again.
Step 2: Try the File Explorer “Continue” Prompt
Sometimes Windows can add your account to the folder permissions automatically.- Open File Explorer.
- Browse to the folder.
- Double-click the folder.
- If prompted with “You don’t currently have permission to access this folder”, select Continue.
- Approve the User Account Control prompt if asked.
Note: Selecting Continue can permanently change the folder’s access control list. That is usually fine for personal data folders, but it may not be appropriate for application folders, shared folders, or company-managed systems.
Step 3: Take Ownership Using File Explorer
Taking ownership gives your administrator account the ability to change permissions.- Right-click the problem folder.
- Select Properties.
- Open the Security tab.
- Select Advanced.
- At the top of the Advanced Security Settings window, look for Owner.
- Select Change next to the current owner.
- Type your Windows username, Microsoft account email, or the group name Administrators.
- Select Check Names.
- If Windows resolves the name, select OK.
- Enable Replace owner on subcontainers and objects if you want ownership applied to all files and subfolders.
- Select Apply.
- If prompted, approve the administrator permission request.
- Select OK to close the dialogs.
Tip: For personal folders, selecting your user account is usually best. For repair work on a shared administrator-managed folder, selecting the local Administrators group may be more appropriate.
Step 4: Grant Your Account Folder Permissions
Ownership alone does not always give you access. After becoming the owner, you may still need to add permissions.- Right-click the folder again.
- Select Properties.
- Open the Security tab.
- Select Advanced.
- Select Add.
- Select Select a principal.
- Enter your username and select Check Names.
- Select OK.
- Under Basic permissions, choose one of the following:
- Read & execute if you only need to open files.
- Modify if you need to edit, create, or delete files.
- Full control if you need complete management access.
- Set Applies to to This folder, subfolders and files.
- Select OK.
- Back in Advanced Security Settings, select Apply.
- If prompted, allow Windows to apply the permissions to child items.
Warning: Avoid using Full control unless you really need it. For most personal data recovery situations, Modify is enough.
Step 5: Use Command Prompt if File Explorer Fails
If the graphical method fails, use an elevated Command Prompt. This is often faster for folders containing many files.- Select Start.
- Type cmd.
- Right-click Command Prompt.
- Select Run as administrator.
- Approve the UAC prompt.
takeown /f "C:\Path\To\Folder" /r /d yThis takes ownership of the folder and its subfolders.
Next, grant your current user account full control:
icacls "C:\Path\To\Folder" /grant "%USERDOMAIN%\%USERNAME%:(OI)(CI)F" /t /cWhat the command does:
- /grant adds permissions for your account.
- (OI) applies permissions to files inside the folder.
- (CI) applies permissions to subfolders.
- F means Full control.
- /t applies changes recursively.
- /c continues even if some files return errors.
Tip: If you only want Modify access instead of Full control, replace F with M in theicaclscommand.
Step 6: Re-Enable Inheritance When Appropriate
If the folder was copied from another Windows installation, it may contain old permissions that no longer match your current PC. Re-enabling inheritance can make permissions cleaner.- Right-click the folder.
- Select Properties.
- Open Security.
- Select Advanced.
- If you see Enable inheritance, select it.
- Select Apply.
- Choose to apply inherited permissions to child objects if prompted.
Warning: Do not blindly reset inheritance on system folders, program folders, or folders managed by work/school policies.
Troubleshooting Notes
The folder is on another user’s profile
If the folder came fromC:\Users\OldName, you may need to take ownership of only the specific subfolder you need, such as Documents, Pictures, or Desktop. Avoid changing permissions on the entire old profile unless necessary.The folder is on an external drive
External NTFS drives retain permissions from the previous Windows installation. Taking ownership and granting your account access usually resolves this.The folder is on a network share
Network access depends on both share permissions and NTFS permissions. If you do not control the server or NAS, you may need the administrator of that device to grant access.The files are encrypted
If the files were encrypted with Windows file encryption, changing ownership and permissions may not be enough. You may need the original encryption certificate or recovery key.Some files still fail
A few files may be in use, corrupted, protected, or have unusual permissions. Restart the PC and run the command again. If errors continue, check the drive for file system issues before making more permission changes.You changed the wrong permissions
If the folder should inherit default permissions from its parent, you can reset inherited ACLs with caution:icacls "C:\Path\To\Folder" /reset /t /cUse this only when you understand the impact, because it removes custom permissions and replaces them with inherited defaults.
Conclusion
“Access Denied” folder errors are usually caused by mismatched ownership, missing permissions, or old security settings carried over from another Windows installation. By taking ownership first and then granting the correct permissions, you can regain access to personal files without reinstalling Windows or using third-party tools.For most users, the File Explorer method is safest and easiest. For stubborn folders or large directory trees,
takeown and icacls provide a reliable administrator-level repair path.Key Takeaways:
- Ownership controls who can change permissions.
- Permissions control who can read, modify, or delete folder contents.
- Use File Explorer first for a safer, visual approach.
- Use
takeownandicaclswhen the GUI method fails. - Avoid changing permissions on Windows system folders unless absolutely necessary.
This tutorial was generated to help WindowsForum.com users get the most out of their Windows experience.