A futuristic scene depicts secure data transfer between a locked archive and digital folders.
A root-level C:\Documents and Settings entry can look like a leftover from a much older PC: it may appear in a broad directory listing, yet opening it in File Explorer or asking a backup tool to enumerate it can result in Access is denied. On a typical modern Windows installation, that does not mean Windows is storing a second, secret copy of every user profile there. It is a compatibility mechanism connected to the move from the old profile layout to the one Windows uses today.

The distinction matters. Treating this entry as disposable clutter—or trying to force it open so it behaves like an ordinary folder—can create avoidable trouble, particularly for backup jobs. The better approach is to recognize it as a filesystem link intended to preserve old path expectations, inspect it without changing it, and configure software to avoid following it during whole-drive operations.

The name is old; the mechanism is newer​

Windows XP stored user-profile information beneath Documents and Settings. That makes the name genuinely old: XP arrived in 2001, and paths such as C:\Documents and Settings\Username became familiar to users and applications of that era.

But the root-level object on later Windows systems should not be described simply as a folder “from 2001.” Windows Vista, originally released in January 2007, adopted the now-standard C:\Users location for user profiles. To help software built around the previous location, Windows provided C:\Documents and Settings as a junction point referring to C:\Users.

That chronology corrects a common misunderstanding. The old path name comes from the XP period. The compatibility redirection arrangement belongs to the Vista-era transition to C:\Users.

A junction point is a type of NTFS reparse point: a filesystem object that redirects access toward another location. In this case, the relevant compatibility relationship is straightforward:

  • Legacy-looking path: C:\Documents and Settings
  • Current profile location: C:\Users

It is therefore misleading to view both paths as independent profile stores. The modern user data is not normally duplicated merely because the legacy name is present. The junction exists to direct compatible access toward the current location.

Why browsing it can produce Access Denied​

The striking part of this design is that the junction is not meant to behave like a normal folder for interactive browsing. Microsoft documents compatibility junctions of this kind as denying read access to Everyone, so attempts to enumerate their contents fail. In everyday terms, opening the entry and trying to list what is inside is deliberately blocked.

That behavior has an important technical nuance. An access-denied result while enumerating the junction is not proof that the legacy path is useless. Microsoft distinguishes between listing the contents of the junction and an application accessing a specific path through it. Software that calls a specific path can traverse the junction when it has the permissions required for the destination.

This is why “Windows refuses to let you open it” is an incomplete description. It accurately captures the normal Explorer-style experience of trying to browse the object, but it overlooks the link’s actual compatibility role. The restriction prevents ordinary enumeration while the junction can still help older software resolve a path format it expects.

That is also why the entry can seem contradictory: it is visible enough to prompt curiosity, protected enough to reject casual browsing, and retained because path compatibility is more subtle than a simple hide-or-delete decision.

It is not evidence of duplicate user data​

A user who sees both C:\Users and C:\Documents and Settings may reasonably worry that disk space is being wasted by two copies of the same profiles. The documented junction relationship says otherwise. C:\Documents and Settings points to C:\Users; it is not a second modern profile repository in its own right.

This is more than a semantic difference. A backup program that mistakes the junction for a regular directory can walk the same destination data through multiple routes. The result can be duplicate backup content, misleading warnings, or failure conditions depending on how the software handles reparse points.

Do not infer that every visible legacy-looking path has the same purpose or behavior. Windows filesystems can contain several kinds of links and protected operating-system objects. But for this specific root-level name, the useful working model is: a compatibility signpost to the current user-profile tree, not an archive of old Windows accounts.

The backup risk is more practical than the curiosity factor​

For most people, the most consequential issue is not whether they can browse the junction. It is whether their backup, sync, indexing, or security tool starts at C:\ and follows links indiscriminately.

Microsoft warns backup software not to traverse compatibility junctions. Doing so can cause the same data to be backed up more than once and can create circular references. A circular reference is especially problematic for recursive scans: the software may repeatedly encounter paths that lead back into an already visited part of the filesystem unless it explicitly detects and excludes the link.

This explains why an “Access is denied” message involving Documents and Settings is not necessarily evidence of damaged profiles, a failed Windows installation, or malware. One independently reported Windows 11 backup log recorded a failure to list that root-level entry for exactly this reason. That single report cannot establish what every Windows 11 system or backup product does, but it is consistent with the documented protection and with the risks of whole-drive enumeration.

The practical response depends on the software:

  • If a backup tool supports reparse-point or junction handling, configure it to preserve the junction as a link where appropriate but not recursively follow it.
  • If the job is meant to protect personal files, choose the actual folders under C:\Users rather than scanning the entire system drive without exclusions.
  • If an error occurs while backing up C:\, check whether the tool is attempting to list or traverse Documents and Settings before assuming user data is inaccessible.
  • If the product offers an exclusion list, excluding this compatibility path may be appropriate when the tool cannot safely handle junctions. Follow the backup product’s documentation for its own link-handling rules.

This is not an argument against system-image backups or full-drive backups. It is an argument for using backup software that understands Windows filesystem metadata and for making its handling of junctions explicit.

How to inspect the entry without altering it​

Windows provides command-line tools that can reveal hidden, system, and reparse-point entries. These are useful for inspection because normal File Explorer behavior does not provide a complete view of how an item is represented by NTFS.

Open Command Prompt and use:

dir /a C:\

The /a switch displays all files, including hidden and system files. That can help establish which root-level objects exist on the installation.

To focus on reparse points, use:

dir /al C:\

In the dir command’s attribute selection, l represents reparse points. This is the more targeted command when investigating filesystem links rather than every hidden or protected object.

For reparse-point data associated with a specific file or directory, Windows documents this syntax:

fsutil reparsepoint query "C:\Documents and Settings"

fsutil reparsepoint query retrieves the reparse-point data associated with the named object. The command references for both dir and fsutil reparsepoint apply to Windows 11.

These commands are observation tools, not repair tools. Their value is that they let an administrator or advanced user distinguish a junction from an ordinary folder before making a damaging assumption. The supplied documentation does not establish that this particular fsutil query always requires an elevated Command Prompt, so elevation should not be presented as a universal prerequisite for the command itself.

Why forcing access is the wrong default​

An Access Denied prompt often encourages a familiar troubleshooting impulse: take ownership, alter permissions, or attempt to remove the obstacle. That instinct makes sense for a personal folder that has accidentally acquired the wrong ACL. It is much less appropriate for a protected compatibility junction whose intended behavior includes blocking enumeration.

The evidence supports a restrained conclusion: changing access controls is unnecessary for normal use of the modern profile tree because that tree is at C:\Users, and following the junction during backup can produce duplicate-data or circular-reference problems. It does not support the stronger claim that changing ownership or an ACL will invariably break Windows or every application. Such a universal warning would go beyond the available documentation.

Still, the lack of proof that every modification is catastrophic is not a reason to modify the object casually. Permission changes can undermine the designed boundary between ordinary browsing and compatibility routing, and they solve no ordinary user problem. If a specific business application genuinely cannot function, diagnose its configured paths and permissions first rather than turning a system compatibility object into a browsable folder.

Likewise, deleting the entry should not be a routine cleanup step. The junction’s reason for existing is backward compatibility. Removing it may not affect all software, but it removes a path-resolution mechanism that legacy software may expect.

What can—and cannot—be said about Windows 11​

There is contemporary evidence that the Documents and Settings-to-Users junction remains relevant in Windows 11-era compatibility work. Current installer-compatibility documentation covering Windows 11 releases through 25H2 identifies C:\Documents and Settings as the legacy junction to C:\Users. The reported Windows 11 backup log adds a real-world example of an Access Denied listing failure at that entry.

Those facts justify treating the junction as a current issue on standard Windows 11 NTFS installations, especially when configuring installer, migration, backup, or endpoint-management software. They do not prove that every edition, build, customized deployment, future servicing release, or nonstandard filesystem setup has an identical junction and ACL configuration. Administrators should verify the local machine rather than relying on an absolute claim about all Windows 11 PCs.

That caution is worthwhile in enterprise environments. A managed image may contain policy changes, security tooling, altered backup filters, or deployment customizations that affect what staff observe. Documentation and local inspection should take priority over a one-size-fits-all troubleshooting script.

The sensible way to handle the “ghost folder”​

C:\Documents and Settings is best understood not as a haunted remnant, nor as a cache of duplicated profiles, but as a protected compatibility junction tied to Windows’ transition from the XP-era profile location to C:\Users.

For ordinary Windows users, the rule is simple: use C:\Users for real profile data, leave the legacy entry alone, and investigate backup warnings as link-handling issues before treating them as data-loss events. For administrators and software maintainers, the lesson is more specific: recognize reparse points during filesystem scans, avoid recursively traversing compatibility junctions, and test on the Windows versions and images actually in use.

The folder name may belong to an older generation of Windows, but its presence reflects an enduring engineering trade-off: preserve expected paths for compatibility while protecting the filesystem from being blindly walked twice.