Default NTFS  Owner permissions on a newly created folder

Posted on 2008-11-14
Last Modified: 2012-08-13
We currently have a number of Windows 2003 server. On some of them when you create a folder, it puts the Administrators group of the server as the Owner (This is how we want it)

However on other servers it puts the creator as the owner (This is not how we want it)

Where can I set it so that any new folder that gets created, has the Local Administrators group as the owner?
Question by:MattNicholas
    LVL 77

    Expert Comment

    by:Rob Williams
    This is usually set on the parent folder. In the folders where they are owned by the creator, you will likely see in the NTFS/security permissions "CREATOR OWNER" with special permissions.

    In the parent folder set the administrators group as owners, remove the Creator Owner permissions, and under advanced select replace permissions entries on all child objects....
    Your decision, but this is not usually done on the "users" folder for things such as redirected my documents. You can run into problems if you tinker with permissions on those folders.


    Author Comment

    Thanks for that.

    But I created the folder on the root of the c:\ so where does it get it's default NTFS settings?

    On some servers if you create a folder at the root it sets the Local Administrators group as the owner
    However on other servers it puts the creator as the owner and not the Local Administrators group

    I understand that I can change the NTFS permissions and replace them, but how do I set it so by default the Local Administators group is the owner at files created off the root?

    LVL 77

    Expert Comment

    by:Rob Williams
    The default behavior on an NTFS root should be the creator is the owner. This is why you usually create a folder and make it a share. You can then set permissions on the parent folder and select to apply to child objects.
    System drives are different, and the administrators group is the default owner.
    You should be able to change the NTFS/Security permissions on the drive itself to affect root inherited permissions.
    LVL 31

    Accepted Solution

    Default behavior is that if user is member of administrators group, the owner of the file/folder will be the administrators security group.

    This is controlled by the following policy setting:
    Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\System Objects: Default owner of objects created by members of the Administrators group
    * Administrators group (default)
    * Object creator

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
    Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now