[SOLVED] Help needed to understand Windows permissions

[Rodion15]

I’d like to understand Windows permissions, so I went to some of the Windows protected folders, which I understand should never be tampered with and I never to.

However, on looking at the permissions, I find them puzzling.

Here’re two examples:

Example 1:

This file cannot be edited:

"C:\Windows\System32\drivers\etc\hosts”

However, when I look at the permissions, why does the ACE show it as having "write" permission?...shouldn't that be unticked?

Example 2:

The C:\Windows folder is equally and understandably protected. However, I find the permissions puzzling, it shows the permissions as “Modify for this folder only”…Modify means “you can create new files and folders”…However: I cannot create new files, only folders. Shouldn’t the “Create files/write data” advanced permission be unticked?



Please understand that I know why these items are protected, what I’d like is to know how to interpret permissions by looking at them.

 

[SkyNetRising]

Please understand that I know why these items are protected, what I’d like is to know how to interpret permissions by looking at them.

You can create files and folders in your user profile, set whatever file permissions you want and test, how they work.
And no - you should not change file permissions on windows system files/folders.

Read some documentation.

Understanding NTFS Permissions | FolderSecurityViewer Blog

NTFS permissions of folder and files. Limitations? Learn about inheritance of NTFS permissions and how to get effective permissions of a user.

blog.foldersecurityviewer.com

http://ntfs.com/ntfs-permissions.htm