How to Check Shared Folder Permissions in Windows 11

Learn how to check shared folder permissions in Windows 11 using File Explorer, PowerShell, NTFS security settings, and Computer Management.

Knowing how to check shared folder permissions in Windows 11 can help you understand why another computer can see a network share but cannot open, modify, or delete files inside it. Windows uses multiple layers of access control, so checking only the sharing settings may not always explain the final result.

A shared folder can have permissions assigned at the SMB share level and additional permissions assigned to the underlying Windows file system. The effective access a user receives depends on these settings and the account being used.

In this guide, you will learn how to check shared folder permissions in Windows 11 using File Explorer, the folder Security tab, PowerShell, and other built-in Windows tools. You will also learn how to distinguish share permissions from NTFS permissions and troubleshoot common access problems.

What Are Shared Folder Permissions in Windows 11?

Shared folder permissions determine which users or groups can access a folder through a network share. For example, a shared folder might allow a user to read files but prevent that user from changing or deleting them.

Windows network sharing commonly uses the Server Message Block (SMB) protocol. When another computer connects to a path such as \\ComputerName\SharedFolder, Windows evaluates the permissions associated with the share and the underlying folder.

This means that seeing a shared folder in File Explorer does not necessarily mean that you have full access to its contents.

Share Permissions vs. NTFS Permissions

One of the most important concepts when troubleshooting Windows shared folders is the difference between share permissions and NTFS permissions.

Share Permissions

Share permissions apply when a folder is accessed through its network share. They can determine whether an account has Read, Change, or Full access to the SMB share.

NTFS Permissions

NTFS permissions are assigned to the folder and files on the Windows file system. They control what an account can do with the files and folders, including reading, modifying, creating, and deleting content.

For a network connection, both permission layers can affect the final access available to the user. This is why a user may be able to connect to a share but still receive an access denied message when opening a particular folder.

Method 1: Check Shared Folder Permissions in File Explorer

The easiest way to inspect permissions on a shared folder is through File Explorer.

1. Press Windows + E to open File Explorer.
2. Browse to the folder that is being shared.
3. Right-click the folder.
4. Select Properties.
5. Open the Sharing tab.
6. Select Advanced Sharing if available.
7. Review the sharing configuration.

The Advanced Sharing window can show whether the folder is currently shared and provides access to the share permissions.

Depending on the Windows configuration, you may need administrator privileges to change certain sharing settings.

Method 2: Check NTFS Permissions from the Security Tab

If you need to determine whether a user can actually access files inside the shared folder, check the folder's Security settings as well.

1. Open File Explorer.
2. Locate the shared folder.
3. Right-click the folder and select Properties.
4. Open the Security tab.
5. Review the listed users and groups.
6. Select an account or group to view its permissions.

The Security tab can show permissions such as Read, Write, Modify, and Full control, depending on the account and folder configuration.

Pay particular attention to the account that is being used when connecting from another computer. Checking permissions for the wrong account can lead to an incorrect diagnosis.

Method 3: Check SMB Share Permissions with PowerShell

PowerShell provides a more direct way to inspect SMB share permissions. Windows includes the Get-SmbShareAccess cmdlet for retrieving the access control information associated with an SMB share.

Open Windows Terminal or PowerShell and run:

Get-SmbShare

This lists the SMB shares available on the computer. Identify the share name that you want to inspect.

For example, if the shared folder is named Projects, run:

Get-SmbShareAccess -Name "Projects"

The output can show information such as the account name, access control type, and access right.

A simplified result may look similar to:

Name       AccountName       AccessControlType   AccessRight
----       -----------       ------------------   -----------
Projects   Everyone          Allow                Read
Projects   Administrators    Allow                Full

The exact accounts and rights on your computer will depend on your configuration.

How to Understand Get-SmbShareAccess Results

The Get-SmbShareAccess command can provide several important pieces of information.

• AccountName: The user or group associated with the permission.
• AccessControlType: Indicates whether the entry allows or denies access.
• AccessRight: Shows the level of access assigned to the account.
• Name: Identifies the SMB share being inspected.

For example, an entry showing Everyone with Read access does not automatically mean that every user can modify files. The underlying folder permissions still need to be considered.

Method 4: Check the Shared Folder Path with PowerShell

You may also want to find out which local folder is behind a particular SMB share.

Run:

Get-SmbShare

The output normally includes the share name and its local path.

For a more focused result, you can use:

Get-SmbShare -Name "Projects" | Select-Object Name, Path, Description

This can be useful when several shared folders have similar names or when you need to verify that the share points to the expected directory.

Method 5: Check Folder Permissions with PowerShell

PowerShell can also inspect the file-system permissions on the actual folder.

For example:

Get-Acl "C:\Projects"

To display the access entries in a more readable format, use:

(Get-Acl "C:\Projects").Access

This lets you examine the permissions assigned to users and groups on the underlying folder.

Replace C:\Projects with the actual path of your shared folder.

How to Check Both Permission Layers

When troubleshooting a shared folder, check both the SMB share and the underlying folder.

First, identify the share:

Get-SmbShare -Name "Projects"

Then check its SMB permissions:

Get-SmbShareAccess -Name "Projects"

Finally, inspect the NTFS permissions of the folder shown in the share's Path property:

(Get-Acl "C:\Projects").Access

This three-step process gives you a better picture of how the shared folder is configured.

How to Test Access from Another Windows 11 PC

After checking the permissions, test the share from another computer on the same network.

Open File Explorer and enter the UNC path in the address bar:

\\ComputerName\Projects

You can also use the host computer's IP address:

\\192.168.1.10\Projects

If the share opens successfully but a particular file or folder cannot be accessed, inspect the permissions on that specific item.

If the computer cannot connect to the share at all, the problem may be related to network connectivity, Network Discovery, File and Printer Sharing, Windows Firewall, authentication, or SMB configuration rather than the folder permissions alone.

For more information about checking the shared folders themselves, see How to Check Shared Folders in Windows 11.

What to Do When You Get Access Denied

If Windows displays an Access Denied message, work through the problem systematically instead of immediately changing every permission.

1. Confirm that you are connecting to the correct computer and share name.
2. Check whether the account being used is listed in the share permissions.
3. Check the Security tab on the underlying folder.
4. Verify that the account belongs to the expected Windows group.
5. Test the UNC path directly.
6. Check Network Discovery and File and Printer Sharing settings.
7. Review Windows Firewall settings.

You can review Network Discovery settings using How to Check Network Discovery Settings in Windows 11.

If File and Printer Sharing is part of the problem, see How to Check File and Printer Sharing Settings in Windows 11.

You can also review firewall configuration with How to Check Windows 11 Firewall Settings.

Why a User Can See a Folder but Cannot Modify It

A common situation is that a user can open a shared folder and read its contents but cannot create, edit, or delete files.

This usually indicates that the account has sufficient permission to read the share but does not have the required write or modify permission at the relevant permission layer.

For example, the SMB share may allow Change access while the underlying NTFS permissions allow only Read access. In that situation, the file-system permission can prevent modifications.

Instead of simply giving everyone Full Control, identify the account or group that actually needs access and assign only the permissions required for the intended task.

How to Check Which Users Have Access

To inspect SMB share access, run:

Get-SmbShareAccess -Name "Projects"

To inspect local folder access, run:

(Get-Acl "C:\Projects").Access

Compare the account names and permission levels shown by both commands.

This is particularly useful on computers that have several users, shared folders, or group-based permissions.

Check Shared Folder Permissions Before Changing Them

It is usually better to inspect the current configuration before modifying permissions. Changing permissions without understanding the existing setup can unintentionally expose files or prevent legitimate users from accessing them.

Keep track of which users need Read access and which users need to create, modify, or delete files. Use groups where appropriate so permissions remain easier to manage as the number of users increases.

Also avoid granting broad permissions simply because they make a connection problem disappear. A working connection and an appropriately secured share are two separate goals.

Useful Commands for Shared Folder Permissions

Command	Purpose
Get-SmbShare	Lists SMB shares on the computer.
Get-SmbShareAccess -Name "ShareName"	Displays access permissions for an SMB share.
Get-Acl "C:\Folder"	Displays the security descriptor for a folder.
(Get-Acl "C:\Folder").Access	Displays the folder's access entries.
net share	Lists shared resources available through the Windows command line.

Shared Folder Permission Troubleshooting Checklist

• Confirm that the folder is actually shared.
• Check the exact SMB share name.
• Check the local path associated with the share.
• Check SMB share permissions.
• Check NTFS permissions.
• Verify the account being used for authentication.
• Test the UNC path directly.
• Check the network profile.
• Verify Network Discovery settings.
• Verify File and Printer Sharing settings.
• Review Windows Firewall configuration.
• Avoid granting unnecessary Full Control permissions.

Frequently Asked Questions

How do I check shared folder permissions in Windows 11?

Right-click the shared folder, open Properties, and review both the Sharing and Security tabs. You can also use PowerShell with Get-SmbShareAccess to inspect SMB share permissions.

What command shows shared folder permissions?

The PowerShell command Get-SmbShareAccess -Name "ShareName" displays the access control information associated with an SMB share.

Are share permissions and NTFS permissions the same?

No. Share permissions apply to access through the SMB share, while NTFS permissions apply to the underlying Windows file system. Both can affect network access.

Why can I see a shared folder but not open it?

The computer may be able to discover the share while the account lacks sufficient permission to access the share or underlying folder. Check both permission layers and verify the account being used.

Why can I open a shared folder but not edit files?

The account may have Read access but lack the required write or modify permissions. Check the SMB share permissions and the Security settings on the underlying folder.

Can I check shared folder permissions without PowerShell?

Yes. File Explorer provides the Sharing and Security tabs for reviewing the sharing configuration and file-system permissions.

Related Windows 11 Networking Guides

If you are troubleshooting Windows 11 network file sharing, these guides can help:

• How to Check Shared Folders in Windows 11
• How to Check File and Printer Sharing Settings in Windows 11
• How to Check Network Discovery Settings in Windows 11
• How to Check Network Profile in Windows 11
• How to Check Windows 11 Firewall Settings
• How to Check IP Address in Windows 11
• How to Check Default Gateway in Windows 11

Final Thoughts

Checking shared folder permissions in Windows 11 is an important step when troubleshooting network file access. Instead of looking at only one setting, check the SMB share permissions and the permissions on the underlying folder.

For quick diagnostics, PowerShell commands such as Get-SmbShare, Get-SmbShareAccess, and Get-Acl can provide useful information about how a shared folder is configured.

Once you understand which account is connecting, which share is being accessed, and which permissions apply to the underlying folder, it becomes much easier to identify why a user can read, modify, or cannot access shared files.