In this video i will configure NTFS permissions as a regular user and block access to a folder for all other users. I will then use the Take Ownership option to access the file as a member of the Administrators group.

1. Log on as Aaron and select Start > My Computer
2. Open the D: drive and select File > New > Folder and name the new folder Aaron’s Data.
3. Create a text file called Secret.txt in D:\Aaron’s Data.
4. Right-click Aaron’s Data, select Properties, and click the Security tab.
5. In the Security tab of the folder’s Properties dialog box, highlight the Users group and click the Remove button. You see a dialog box telling you that you cannot remove Users because this group is inheriting permissions from a higher level. Click the OK button.
6. Click the Advanced button. Deselect the Allow Inheritable Permissions From The Parent To Propagate To This Object And All Child Objects checkbox, and click Copy in the Security dialog box in case you need to restore the permissions later. Click OK to exit the Advanced Security Settings dialog box. Now remove the Users group and the Administrators group from the Security tab of the folder’s Properties dialog box. Click OK.
7. Log off as Aaron and log on as Administrator.
8. Try to access D:\Aaron’s Data\Secret.txt. When you click D:\Aaron’s Data, you will get an Access Is Denied error message. Click the OK button.
9. Right-click the Aaron’s Data folder, select Properties, and click the Security tab. You may see a message that you do not have permission to view or edit the current permission settings for the folder but you can take ownership or change auditing settings. Click the OK button.
10. Click the Advanced button and select the Owner tab. Click on the Administrator account and check the box Replace Owner On Subcontainers And Objects and click the OK button.
11. The Security dialog box will appear notifying you that you do not have permissions to read the contents of the directory and asking you if you want to replace the directory permissions so that you are granted Full Control permission. Click the Yes button to replace all permissions. You will now have Full Control permission to the Aaron’s Data folder and the Secret.txt file.