Managing folder permissions in Windows 11 is essential for protecting your files and controlling how users interact with them. Sometimes, you want others to read and write files but prevent them from deleting anything accidentally or intentionally. This guide will help you set up such permissions step-by-step.
By customizing folder permissions, you can maintain data integrity while still allowing collaboration or access. Windows 11 offers built-in tools to fine-tune these settings without needing additional software.
This article walks you through the process in simple terms, explaining each step and why it matters. Whether you’re new to Windows or just need a refresher, you’ll find everything you need here.
Let’s begin by understanding the basics and setting up the right permissions for your folder.
Quick Note Before You Begin
- Make sure you have administrator rights on your Windows 11 device. Changing permissions requires elevated access.
- Backup important files before modifying folder permissions to avoid accidental data loss.
- Know which user or group you want to apply these permissions to (e.g., a specific user account or “Users” group).
- This method works for NTFS-formatted drives only, as FAT/FAT32 don’t support advanced permissions.
Step 1: Locate the Folder
First, find the folder on your computer where you want to set the permissions. You can do this by opening File Explorer and navigating to the folder’s location.
Step 2: Open Folder Properties
Right-click the folder and select Properties from the context menu. This opens the folder’s properties window, where you can adjust permissions.
Step 3: Access the Security Tab
In the Properties window, click on the Security tab. This tab shows the current permission settings and the users or groups that have access to this folder.
Step 4: Edit Permissions
Click the Edit button to modify permissions. A new window will open, listing users and groups that currently have access.
Step 5: Select the User or Group
Choose the user or group you want to apply the new permissions to. If the user or group is not listed, click Add, type the name (e.g., “Users”), and click Check Names to confirm.
Step 6: Set Read and Write Permissions
In the permissions list, check the boxes for:
- Read & execute — allows users to view and run files.
- List folder contents — lets users see the files and subfolders inside.
- Read — permits reading file contents.
- Write — enables creating and modifying files.
These permissions allow reading and writing but don’t control deletion yet.
Step 7: Prevent Delete Access
To stop users from deleting files or folders, you need to deny the Delete permission:
- In the same permissions window, look for the Delete permission under the Allow and Deny columns.
- Check the box under Deny for Delete.
- Also, to be thorough, check Deny for Delete subfolders and files if it appears.
Important: Deny permissions take precedence over Allow permissions, so denying Delete will prevent deletions even if other permissions allow it.
Step 8: Apply and Confirm Changes
Click Apply then OK to save the changes in both the Permissions and Properties windows. Windows may display a warning about denying permissions—acknowledge it to proceed.
Step 9: Test the Settings
Log in as the user you configured or ask someone with that account to attempt deleting a file inside the folder. The delete option should be blocked, while reading and writing files still work.
Why These Steps Matter
Controlling deletion separately from read/write access helps prevent accidental or malicious loss of data. You allow users to update and add content but keep files safe from removal. This is especially useful in shared work environments or on sensitive data folders.
Alternative Method: Using Command Line (Advanced)
If you prefer using the icacls command, you can set permissions via Command Prompt:
icacls "C:PathToYourFolder" /deny UserName:(DE)This command denies the Delete (DE) permission for the specified user. Replace UserName and the folder path accordingly.
However, using the graphical interface is simpler for most users and reduces the risk of errors.
Frequently Asked Questions (FAQs)
Can I prevent delete but allow renaming files?
Unfortunately, renaming a file requires delete permission on the old name and create permission on the new. So, preventing delete will also prevent renaming.
Will denying delete affect folder owners or administrators?
Administrators and owners usually have the ability to override permissions, so they can still delete files unless explicitly denied by higher-level policies.
What happens if I deny delete but allow full control?
Deny permissions take precedence, so denying delete will block deletion even if full control is allowed.
Can I apply these permissions to multiple folders at once?
Yes, you can select multiple folders and set permissions via Properties, or apply permissions to parent folders with inheritance settings.
How do I revert these permission changes?
Go back to the Security tab, select the user or group, and remove the deny checkboxes or reset permissions to default.
When Nothing Works
If permissions don’t seem to apply correctly, try these options:
- Ensure you are logged in as an administrator.
- Check if the folder inherits permissions from a parent folder; you might need to disable inheritance first.
- Use the Effective Access tab in the Security settings to verify which permissions are applied.
- Consult Microsoft’s official documentation or support: Microsoft Windows Support.
Conclusion
Setting folder permissions to allow reading and writing but prevent deleting in Windows 11 is straightforward once you understand the steps. By carefully adjusting the security settings, you can protect your files from accidental deletion while still enabling collaboration.
Always remember to back up data before making changes and test the permissions to ensure they work as expected. With this guide, you have the tools to manage your folders securely and effectively.