The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
The safest fix depends on where the folder is and what it contains. For a locally attached NTFS folder that holds your own data, use an elevated Command Prompt to take ownership of that specific folder, grant your account the access it needs, and then verify the permissions. Do not run these commands on the whole C: drive, WindowsApps, or other Windows-managed folders. A network share, read-only drive, or protected system folder needs a different fix.
What the error means
Windows uses “enumerate” to describe listing or walking through the files and folders inside a selected folder, or container, so it can read or apply security information. The error means Windows could not inspect or change security information on one or more objects in that tree. It is commonly related to ownership or access-control permissions, but it does not prove that permissions are the only problem.
Three concepts are easy to confuse:
- Ownership identifies who can manage an object’s permissions. Taking ownership does not automatically grant ordinary access to its contents; an access-control entry may still be needed.
- Permissions determine which actions an account or group can perform, such as reading, changing, or deleting files.
- Inheritance controls whether permissions from a parent folder flow down to files and subfolders.
Windows access control also includes other factors, such as deny entries and the security context of the process. Network shares add a separate layer of share permissions. See Microsoft’s access-control overview for how these pieces relate.
Before changing anything, identify the target:
- Local personal-data folder such as
D:Photos: a targeted ownership and ACL repair may help. - Network path such as
\ServerShareFolder: the server or NAS may control access; local changes may not be enough. - Windows or application folder: stop rather than taking ownership recursively. Use the feature or app that manages it.
- Drive with read errors or a read-only state: permission changes will not fix the underlying storage problem.
Before changing permissions
- Confirm the exact path. Scope the repair to the affected folder or, if only one object fails, that file or subfolder. Do not target
C:as a shortcut. - Back up important files. If the drive is showing read errors, disappearing files, or repeated input/output failures, prioritize copying accessible data or imaging the drive rather than making recursive permission changes.
- Check whether the path is local. A path beginning with
\is a network resource. Ask its server, domain, or NAS administrator to check permissions there. - Check the file system. In File Explorer, right-click the drive, choose Properties, and look at File system on the General tab. NTFS supports Windows file and folder ACLs; FAT32 and exFAT do not provide the same per-file Windows security model.
- Use an elevated terminal. Being an administrator—or the only person using the PC—does not mean every application is running with an elevated administrator token.
- Check who you are running as if needed. In Command Prompt,
whoamidisplays the current account, andwhoami /groupslists its security groups. These commands do not themselves elevate the terminal.
If the device is managed by work or school, check with its administrator before changing ownership or permissions.
#1 Best Overall
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Fix a personal data folder with Command Prompt
Use this procedure only for a folder you control on a locally attached NTFS volume. Replace D:AffectedFolder with the exact path. The commands below recursively affect objects inside that folder, so verify the path before running them.
-
Open Start, search for Command Prompt, right-click it, and select Run as administrator. Approve the User Account Control prompt.
-
Take ownership of the affected folder as your current account:
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.takeown /f "D:AffectedFolder" /r /d yTo assign ownership to the local Administrators group instead, use:
takeown /f "D:AffectedFolder" /a /r /d yHere,
/fspecifies the target,/rprocesses the tree recursively,/aassigns ownership to Administrators rather than the current user, and/d ysupplies the default response when the recursive operation cannot list a directory. Microsoft’stakeownreference describes these options and notes that taking ownership may need to be followed by a separate permissions change.Rank #2
Dell Latitude 3190 11.6" HD 2-in-1 Touchscreen Laptop Intel N5030 1.1Ghz 4GB Ram 128GB SSD Windows 11 Professional (Renewed)- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
- 4GB DDR4 System Memory; 128GB Solid State Drive
- 11.6" HD (1366 x 768) Multi-Touch Display
- Combo headphone/microphone jack - Noble Wedge Lock slot - HDMI; 2 USB 3.1 Gen 1
- Windows 11 Pro
-
Grant the current account Modify access, usually a better starting point than Full Control for personal data:
icacls "D:AffectedFolder" /grant "%USERNAME%":(OI)(CI)M /t /c(OI)and(CI)pass the entry to files and subfolders;Mmeans Modify;/tprocesses the tree; and/ccontinues after individual errors. If you need to grant the local Administrators group instead, use:Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsSpecial offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.icacls "D:AffectedFolder" /grant Administrators:(OI)(CI)M /t /cUse Full Control only when you genuinely need to manage permissions or perform actions that Modify does not allow. For the current account, that variant is:
icacls "D:AffectedFolder" /grant "%USERNAME%":(OI)(CI)F /t /cIn these commands,
Fmeans Full Control. Theicaclsreference documents the permission and inheritance syntax. -
Inspect the folder’s ACL:
icacls "D:AffectedFolder"To inspect entries across the tree, run:
icacls "D:AffectedFolder" /t /c -
Test the result: open the folder, create a temporary text file, rename it, and delete it. Try a representative subfolder too, then remove the test file.
Rank #3
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
If only one file or child folder caused the error, target that object instead of rewriting permissions across its parent tree. Take ownership of the target if required, then grant only the permission needed for your task.
Use File Explorer instead
For a local personal-data folder, you can change ownership through the Security properties. Exact wording may vary by Windows edition and build.
- Right-click the folder and choose Properties > Security > Advanced.
- Check the Owner field, choose Change, enter your account or the local Administrators group, then select Check Names and OK.
- If the folder is yours and you intend to apply the ownership change through the data tree, select Replace owner on subcontainers and objects and apply.
- Back in the security settings, add the account or group that needs access and grant the least permission that meets your goal, such as Read or Modify. Choose Full Control only if it is necessary.
Do not confuse these checkboxes: “Replace owner on subcontainers and objects” changes ownership recursively. “Replace all child object permission entries with inheritable permission entries from this object” replaces child ACL entries with inherited entries. The second option can remove intentional, object-specific permissions; do not select it casually.
If Explorer reports an error for a child object, note its name. The parent change may have succeeded for other objects; check the output and inspect or repair the problem object separately.
If it still says “Access is denied”
Confirm that the terminal is elevated
Close the Command Prompt and reopen it using Run as administrator. An account’s membership in Administrators does not make a non-elevated Command Prompt equivalent to an elevated one.
Recommended Free Tools
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
Check the ACL, inheritance, and deny entries
Run icacls on the affected path and review the entries, looking for the intended user or group, the expected permission, and any explicit deny entry. If inheritance is disabled and the parent folder has appropriate permissions, you can enable it on the data folder with:
icacls "D:AffectedFolder" /inheritance:eEnabling inheritance applies permissions from the parent, so do this only if those parent permissions are suitable. Do not treat a reset or inheritance change as a harmless universal repair.
Do not seize ownership of Windows-managed folders
Stop if the path is under C:Windows, C:Program Files, C:Program FilesWindowsApps, C:ProgramData, C:System Volume Information, C:UsersDefault, or C:Recovery, or is another Windows component or servicing directory. Such folders may be protected intentionally and owned by SYSTEM, TrustedInstaller, or a service identity. Broad ownership or ACL changes can disrupt updates, Store apps, Defender, or other Windows features. Microsoft Q&A also warns against changing ownership of the entire C: drive: ownership-change discussion.
- For a Microsoft Store or Xbox app, use the relevant app, Microsoft Store, or Settings > Apps > Installed apps repair or uninstall options.
- For Windows Update or servicing files, use the relevant Windows troubleshooting or servicing feature rather than manually replacing permissions.
- Do not take ownership of
System Volume Informationsimply to clear an error while applying security information.
Check for a file lock or a linked folder
Close applications that may be using the folder and retry. Safe Mode or Windows Recovery Environment can be an escalation when a process is keeping files in use; they are not proof that permissions are the root cause. Recursive operations can also behave unexpectedly with junctions, symbolic links, mounted folders, or application-managed directories. Understand the path before applying changes across a tree.
Check the drive’s state and health
A read-only volume, file-system damage, failing storage, or a disconnected resource will not be fixed by taking ownership. If you know how to use DiskPart, you can inspect a local volume’s attributes from an elevated terminal:
Best Value
- WINDOWS 11 | STABLE PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 system, this laptop delivers stable performance for everyday computing tasks. It supports web browsing, online learning, document editing, email communication, and basic office work with optimized power efficiency, providing a practical and reliable experience for essential daily use for daily use.
- 15.6” FHD IPS DISPLAY: Features a 15.6-inch Full HD IPS display with narrow bezels, offering wider viewing angles and clearer image details compared to standard panels. The improved screen-to-body ratio enhances visual experience for study, reading, document work, and video playback, making it suitable for both productivity and entertainment use.
- 4GB DDR4 + 128GB eMMC STORAGE: Equipped with 4GB DDR4 memory and 128GB eMMC storage for everyday basics such as browsing, documents, email, and online learning platforms. The built-in TF card slot supports storage expansion up to 1TB, giving you more flexibility for files, photos, videos, and daily documents. TF card not included.
- CONNECTIVITY & PORTS: Includes 1× TF card slot, 2× USB 3.2 Gen1 ports, and 2× full-featured Type-C ports (USB 3.2 Gen1). The Type-C ports support data transfer, charging, and video output, enabling flexible connection with external devices such as monitors, storage, and peripherals for daily work and study use.
- LIGHTWEIGHT DESIGN | ONLINE COMMUNICATION: Designed with a slim, portable profile, this laptop is easy to carry for school, commuting, and travel. A built-in 1MP front camera supports online classes, video meetings, remote communication, and everyday conferencing. The 3300mAh battery works with the low-power system design to support practical daily use, while thermal optimization helps maintain quieter operation during extended tasks.
diskpart
list volume
select volume N
attributes volume
exitReplace N with the correct volume number, and confirm it carefully before selecting it. Do not change attributes just to force an ACL operation. If you see read errors, repeated I/O failures, disappearing files, or signs of hardware trouble, prioritize backup or recovery and use appropriate storage diagnostics.
Check for encryption
NTFS permissions do not decrypt data. If files use Encrypting File System (EFS), a BitLocker-protected volume, third-party disk encryption, or an application’s own encryption, you need the appropriate key, certificate, or recovery method. Changing ownership alone will not make encrypted content readable.
Consider malware or unexpected security changes
If access changed unexpectedly or files have unfamiliar owners or permissions, investigate the cause and run appropriate security checks. Do not disable security software or broaden permissions simply to force access.
If the folder is on a network share or NAS
A path such as \ServerShareFolder involves server-side access controls. Windows may check both the share’s permissions and the file system’s permissions on the server; the more restrictive effective access can prevent the operation. A local administrator on your PC may not have authority to change server-side ACLs, NAS accounts, or domain-managed permissions.
Ask the server, domain, or NAS administrator to check the share permissions and the underlying file or folder ACLs, and to confirm that the account is authorized for the required action. Some SMB access-denied cases require rights to be corrected on the server or storage device, not just on the client; see Microsoft’s SMB share troubleshooting guidance. A router-attached USB drive or NAS may use its own account and permission model, so a Windows Security-tab change may not control it.
Resetting permissions: use only with a rollback plan
For a user-created data folder whose ACLs you know are damaged, /reset can replace permissions with default inherited permissions. It can also remove deliberate custom access, so it is not a general-purpose first fix.
Before an intentional ACL reset, you can save the existing entries:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
icacls "D:AffectedFolder" /save "C:Tempaffectedfolder-acl.txt" /t /cThen, only if appropriate for this folder, reset:
icacls "D:AffectedFolder" /reset /t /cSaving an ACL is not a substitute for a backup, and restoring it requires care with paths and permissions. Test any restoration procedure before relying on it. Microsoft’s icacls documentation describes saving and restoring ACLs.
Quick Recap
Common fixes to avoid
- Do not grant Everyone Full Control as a default fix. It can expose data to every local account, weaken security on shared folders, and still fail to address server-side permissions. Grant a named user or appropriate group only the access it needs.
- Do not take ownership of the whole C: drive. Keep changes scoped to the specific user-data folder. System and application folders rely on intentional owners and ACLs.
- Do not assume ownership means full access. Ownership and access permissions are distinct; you may need an explicit ACL grant.
- Do not assume the message always means corrupted permissions. Protected folders, network controls, a file lock, encryption, read-only state, or storage problems can produce similar failures.
- Prefer
icaclstocacls. Microsoft markscaclsas deprecated and recommendsicacls: Microsoft’scaclsreference.
Quick decision guide
- Local, user-created NTFS folder: use an elevated terminal; take ownership of the exact folder, grant the current account Modify, inspect the ACL, and test.
- Only one child object fails: target that file or subfolder rather than changing the whole parent tree.
- System-managed or Store-app folder: stop and use the Windows feature or application that manages it.
- Path starts with
\: have the server or NAS administrator check share and server-side permissions. - FAT32 or exFAT: do not expect NTFS-style per-file ACL repair; investigate the host, mount state, or storage issue instead.
- Drive has read errors or is failing: protect the data first; permissions are not a storage-recovery fix.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
