Search code examples
windowssecurityntfs

Windows Temp folder default NTFS security


What are the default NTFS security settings of the C:\Windows\Temp folder in Windows 7?


Solution

  • SetACL is capable of listing the permissions of C:\Windows\Temp without first changing them. I retrieved the default permissions with the command setacl -on c:\Windows\Temp -ot file -actn list on a freshly installed system and verified on my system:

    DACL(protected+auto_inherited):
    Users           FILE_ADD_FILE+FILE_ADD_SUBDIRECTORY+FILE_TRAVERSE   allow   container_inherit
    Administrators  full   allow   no_inheritance
    Administrators  full   allow   container_inherit+object_inherit+inherit_only
    SYSTEM          full   allow   no_inheritance
    SYSTEM          full   allow   container_inherit+object_inherit+inherit_only
    CREATOR-OWNER   full   allow   container_inherit+object_inherit+inherit_only
    

    If you prefer a GUI application, SetACL Studio can list permissions from every part of the system without first changing them like Explorer. This is what C:\Windows\Temp looks like in SetACL Studio:

    SetACL Studio - Permissions on C:\Windows\Temp