Add Inherited Permissions Context Menu in Windows 10

By adding a special context menu "Inherited Permissions", you'll be able to turn on or off the inherited permissions for files and folders quickly with one click, without opening the Advanced Security Dialog.

NTFS is the standard file system of the Windows NT operating system family. Starting with Windows NT 4.0 Service Pack 6, it supported the concept of permissions which can be configured to permit or restrict access to files, folders, and other objects locally and over a network.

Permissions

By default, almost all system files, system folders and even Registry keys in Windows 10 are owned by a special built-in user account called "TrustedInstaller". Other user accounts are set to only read the files.

As a user accesses each file, folder, registry key, printer, or an Active Directory object, the system checks its permissions. It supports inheritance for an object, e.g. files can inherit permissions from their parent folder. Also every object has an Owner which is the user account that can set ownership and change permissions.

If you are interested in managing NTFS permissions, refer to the following article:

How to take ownership and get full access to files and folders in Windows 10

Permission types

In short, there are two types of permissions - explicit permissions and inherited permissions.

There are two types of permissions: explicit permissions and inherited permissions.

• Explicit permissions are those that are set by default on non-child objects when the object is created, or by user action on non-child, parent, or child objects.

• Inherited permissions are those that are propagated to an object from a parent object. Inherited permissions ease the task of managing permissions and ensure consistency of permissions among all objects within a given container.

By default, objects within a container inherit the permissions from that container when the objects are created. For example, when you create a folder called MyFolder, all subfolders and files created within MyFolder automatically inherit the permissions from that folder. Therefore, MyFolder has explicit permissions, while all subfolders and files within it have inherited permissions.

Effective permissions are based on a local evaluation of the user's group membership, user privileges, and permissions. The Effective Permissions tab of the Advanced Security Settings property page lists the permissions that would be granted to the selected group or user based solely on the permissions granted directly through group membership. For details, see the following articles:

• Quickly Reset NTFS Permissions in Windows 10
• Add Reset Permissions Context Menu in Windows 10

Add Inherited Permissions Context Menu in Windows 10

Before proceeding, ensure that your user account has administrative privileges.

To add the Inherited Permissions context menu in Windows 10, do the following.

1. Download the following ZIP archive: Download ZIP archive.
2. Extract its contents to any folder. You can place the files directly to the Desktop.
3. Unblock the files.
4. Double click on the Add Inherited Permissions Context Menu.reg file to merge it.
5. To remove the entry from the context menu, use the provided file Remove Inherited Permissions Context Menu.reg.

How it works

The built-in icacls tool is used to make changes to NTFS permissions. The operation requires elevated privileges, so PowerShell is used to launch the icacls process as Administrator in a command prompt instance.

1. Run the following command to disable the inherited permissions for a file or folder and convert them into explicit permissions: icacls "full path to your file" /inheritance:d.
2. Disable the inherited permissions for a file or folder and remove them: icacls "full path to your file" /inheritance:r.
3. Enable the inherited permissions for a file or folder: icacls "full path to the folder" /inheritance:e.

Support us

Winaero greatly relies on your support. You can help the site keep bringing you interesting and useful content and software by using these options: