Have you ever tried opening a folder, installing software, or running a script in Windows and suddenly got an “Access Denied” error?
Most of the time, the real issue is folder permissions!
Folder permissions decide who can read, write, modify, or execute files inside a folder. If these permissions are not set correctly, even an administrator can face problems.
That’s where Windows Command Prompt (CMD) becomes very useful.
Using CMD, you can quickly check folder permissions, see who has access, and identify why something isn’t working as expected. In this guide, we will walk you through the exact commands, explain what each part means, and help you understand standard permission codes clearly.
Why Check Folder Permissions Using CMD?
CMD is the best option as it gives you:
- A fast way to view permissions without opening multiple windows.
- Clear, detailed permission output
- Better control for troubleshooting access-related issues
- Helpful information for servers, VPS, or system-level tasks
Whether you are managing a local PC or a Windows server, this method works everywhere.
Also Read: How to Check .NET Framework Version in Windows CMD?
Common Permission Issues Users Face
Here is a list of common permission issues users often face:
- Application not installing due to missing Write permission
- Script failing because the user lacks Execute access
- Backup failing due to missing Read rights
- Folder accessible to admin but not normal users
But CMD helps you identify these issues quickly.
Let’s get started with the steps!
Also Read: How to Check React Version in Windows CMD?
Step-by-Step Process on How to Check Folder Permission in Windows CMD
➔ Firstly, open CMD with proper access. If you are checking system folders or protected directories:
You have to right-click on ‘Command Prompt’ & select ‘Run as administrator.’
➔ Windows uses the icacls command to display and manage file and folder permissions.
To check folder permissions, enter the following command:
| icacls FolderName |
Or if you want to use the full path:
| icacls C:\Users\Public\Documents |
Once done, just click Enter.
➔ After entering, you will see output similar to this:
| C:\Users\Public\Documents BUILTIN\Administrators:(F) NT AUTHORITY\SYSTEM:(F) BUILTIN\Users:(RX) |
★ What does this mean?
Let’s break this down in a simple way!
- Administrators – Admin users
- SYSTEM – Windows system itself
- Users – Standard user accounts
★ But what are these letters inside brackets?
The letters in brackets indicate the type of access allowed.
Here are the most common permission codes you should know:
➢ F – Full Control
The user can read, write, modify, delete, and change permissions.
➢ M – Modify
The user can read, write, and delete files, but cannot change permissions.
➢ RX – Read & Execute
The user can open files and run programs, but cannot modify anything.
➢ R – Read Only
The user can only view files and folder content.
➢ W – Write
The user can create new files and folders, but cannot modify existing ones.
➢ D – Delete
User is allowed to delete files or folders.
★ Inherited Permissions
There will be cases in which you may see:
| (OI)(CI) |
This means:
OI (Object Inherit) – Files inside the folder inherit the permission
CI (Container Inherit) – Subfolders inherit the permission
Inherited permissions come from the parent folder.
Also Read: How to Check the SQL Version in Windows CMD?
★ Checking Permissions for All Files Inside a Folder
To check permissions for the folder and everything inside it, you have to use:
| icacls FolderName /T |
For example:
| icacls C:\ProjectFiles /T |
This is useful when troubleshooting permission issues for multiple files.
★ Checking Permissions for a Specific User
If you want to find permissions for a particular user, you can scan the output or combine it with:
| findstr Username |
For example:
| icacls C:\ProjectFiles | findstr John |
This helps when multiple users are listed.
Also Read: How to Check Angular Version in Windows CMD?
Conclusion
Checking folder permissions using Windows CMD is one of the most straightforward yet most powerful troubleshooting skills you can learn.
With the icacls command, you can clearly see who has access, what kind of access they have, and why permission errors occur.
Once you understand common permission codes like F, M, RX, R, and W, permission-related problems become much easier to solve. Whether you are managing files on your personal computer, a VPS, or a Windows server, this method gives you complete clarity and control.