Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
How do I fix Access Denied on Windows? First identify whether the refusal comes from a locked file, a bad path or network share, NTFS ownership and permissions, BitLocker encryption, or damaged system or volume data. Confirm the exact path and signed-in account, then back up anything important. If you are authorized to administer the data, make the smallest ownership or permission change that solves the problem; use DISM, SFC, CHKDSK, or Windows recovery only when corruption is indicated.
Changing permissions cannot unlock an encrypted drive, repair a failing disk, or grant access to data you are not authorized to use. The sequence below separates those conditions so you do not make a broad, risky change when a simple reconnect or application close would work.
As an Amazon Associate I earn from qualifying purchases.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What does “Access Denied” mean in Windows?
“Access Denied” is a symptom rather than one specific fault. Windows may refuse to open, copy, move, rename, or delete a file or folder because your account lacks an allowed access-control entry, another process has it open, a path or share is unavailable, the volume is encrypted, or the file system is damaged.
- Permission or ownership problem: The file’s owner or discretionary access-control list (DACL) does not grant your account the needed action. An explicit Deny entry can override an inherited Allow entry.
- Lock or path problem: An application, synchronization client, removable drive, or network connection is holding or hiding the resource.
- Encryption gate: BitLocker requires its recovery key before Windows can read the volume. Permissions do not decrypt it.
- Corruption: Damaged Windows components or volume metadata can produce misleading access errors alongside crashes, missing files, or repeated disk warnings.
Determine which category fits before using an administrative command. A recursive ownership or permission change can affect every item below a folder, while a reset or reinstall can remove files.
Popular on Amazon
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]
Why can’t I open a folder even though I’m an administrator?
Being in the Administrators group does not automatically give unrestricted access to every object. Windows may require elevation for the specific action, preserve another account’s ownership and ACL, enforce an explicit Deny, or block the volume for encryption or file-system reasons.
The folder belongs to another user or organization
Profile folders, corporate shares, and inherited permissions can be owned by a different user, service account, or organization. If the data is not yours to administer, ask the owner or your organization’s administrator rather than bypassing its controls. If you are authorized, record the current owner and permissions before changing them.
An elevated window is required
Open Start, type Command Prompt or Windows PowerShell, right-click it, and choose Run as administrator. A normal window may show the same denial even when your account is an administrator because the requested operation has not been elevated.
A lock, share, or path is failing
Close the program that created the file and pause synchronization software temporarily. For removable storage, disconnect it safely, reconnect it, and try another USB port. For a network share, verify that the computer is on the expected network, reconnect the share, and confirm that the server is online. A share can deny access even when local NTFS permissions appear correct; both the share permission and the folder’s NTFS permission must allow the action.
The volume is encrypted or the file system is unhealthy
A BitLocker prompt is not an ACL problem. Likewise, repeated I/O errors, folders that disappear, or a drive that repeatedly asks to be scanned point toward volume damage. Do not repeatedly force-write to a failing disk; copy irreplaceable data first if it is still readable.
How do I fix Access Denied on Windows?
Work through these steps in order. Stop as soon as the access problem is resolved; broader repairs are not automatically better.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →-
Confirm the scope and account
Write down the complete path shown in the error and test a harmless neighboring file. Is the refusal limited to one file, one folder, an external drive, a network share, or the whole system? Check the account name under Settings > Accounts > Your info and note whether the resource belongs to another person or organization. A single-object failure suggests an ACL or lock; a whole-drive failure suggests a connection, encryption, or volume issue.
-
Clear ordinary locks and reconnect the resource
Save work and close every application that might be using the item, including media players, editors, backup clients, and synchronization tools. Pause synchronization, wait a moment, and retry. Restart Windows if a process will not release the handle. Reconnect removable storage and remap a network share if necessary. Windows’ file-and-folder troubleshooter can address some network, permission, and missing-path symptoms, but it cannot override encryption or an owner who has not granted access.
-
Inspect the owner and permissions
In File Explorer, right-click the item, choose Properties > Security > Advanced, and read the Owner and Permission entries. Check whether your account or an applicable group has the required Allow permission (such as Read, Modify, or Full control) and whether an explicit Deny is present. Check Disable inheritance only when you understand why the inherited entries must change; breaking inheritance can remove protections supplied by the parent folder.
From an elevated prompt, you can display the DACL with:
Recommended: Update Every Outdated Driver on Your PC in One Scan - Free →Recommended: PC Feels Slow? A Free Scan Shows What's Dragging Windows Down →Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.icacls "C:pathtoitem"Save or copy the output before editing it. If the owner is wrong and you are authorized to correct it, Microsoft documents:
takeown /f "C:pathtoitem"For a directory and its contents, the recursive form is:
Also popular on Amazon
Sale
SANDISK 64GB Ultra Flair, USB-A Flash Drive, Up to 150MB/s Read Speeds | USB Flash Drive, Up to 15x Faster than standard 2.0, Password Protection, Durable, Sleek Metal Casing, USB 3.0, Silver/Black- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9+; Software download required for Mac, visit the SanDisk SecureAccess support page]
takeown /f "C:pathtofolder" /r /d yThe
/roption processes every file and subdirectory below the target. Review the target path carefully before running it. Taking ownership does not itself grant every permission; it changes who can manage the ACL. -
Grant only the access you need
After ownership is corrected, use the Security dialog to add your account and select the narrowest Allow permission that solves the task. If a command is necessary, an example for one account is:
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.icacls "C:pathtoitem" /grant "UserName":MMmeans Modify. Replace the account and path with the actual values, and quote names containing spaces. To apply a change to a directory tree,/trecurses through child items and/ccontinues after errors:icacls "C:pathtofolder" /grant "UserName":M /t /cUse recursive
/tonly after inspecting the folder’s purpose and contents. Do not grant Everyone Full control merely to silence the message, and do not remove system or security entries you cannot identify. If the item is a Windows system folder, an application installation, or a managed work folder, restore the vendor or organization’s intended ACL instead of improvising one. -
Respond to a BitLocker prompt
If Windows asks for a BitLocker recovery key, stop changing ACLs. Record the key ID displayed on screen and look for the matching 48-digit recovery key in the linked Microsoft account, your work or school account, a printed copy, a saved file, or a USB drive. A key from another device will not unlock this volume. If the key cannot be found, resetting the device may be the remaining recovery route and removes files, so exhaust backup and account-recovery options first.
-
Back up accessible data before repair
Copy irreplaceable files to another accessible disk or a trusted cloud location before running disk repairs or recovery. A USB flash drive or portable external drive can hold a backup, a recovery drive, Windows installation media, or a saved BitLocker key file. Microsoft specifies at least 8 GB for Windows installation media; capacity needed for a backup depends on the data you are preserving. If copying produces read errors, prioritize the most important files and consider professional data recovery rather than repeatedly retrying a failing disk.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy. -
Repair corrupted Windows components with DISM and SFC
Use these commands when Windows itself is corrupted—for example, system tools fail, protected files are missing, or several unrelated components show errors. In an elevated Command Prompt, run DISM first:
DISM.exe /Online /Cleanup-Image /RestoreHealthWait for it to finish; it can take several minutes and should not be interrupted. Then run:
sfc /scannowSFC checks protected system files and attempts repairs using the component store. Restart and retest the original path after completion. These commands do not replace a missing permission, unlock BitLocker, or repair hardware that is failing.
-
Check a damaged volume with CHKDSK
Microsoft defines CHKDSK as: “Checks the file system and file system metadata of a volume for logical and physical errors.” Use it when symptoms point to volume errors, not as a first response to an ordinary ACL denial. In an elevated prompt, substitute the correct drive letter:
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteSpecial offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.chkdsk C: /fThe
/fswitch fixes logical errors. The/rswitch looks for bad sectors and recovers readable information, so it is more intensive:chkdsk C: /rCHKDSK needs administrator rights. If the volume is in use, Windows may ask to schedule the check at the next restart; answer only after saving work and confirming the drive letter. Do not interrupt a running repair casually. A disk showing physical failure signs can deteriorate while being scanned, which is another reason to copy accessible data first.
Also popular on Amazon
Sale
SANDISK 32GB Ultra Fit USB 3.1 Flash Drive - SDCZ430-032G-G46- A compact, plug-and-stay, high-speed USB 3.1 flash drive that’s ideal for adding more storage to laptops, game consoles, in-car audio and more
- Simple, fast way to add up to 32GB of storage to your device [1GB=1,000,000,000 bytes - Actual user storage less]
- Read speeds up to 130MB/s(1) [(1) Write to drive up to 15X faster than standard USB 2.0 drives (4MB/s); USB 3.1 Gen 1 or USB 3.0 port required. Based on internal testing; performance may be lower depending on host device; 1MB=1,000,000 bytes]
- Write up to 15X faster than standard USB 2.0 drives(1)
- Move a full-length movie to the drive in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.1 Gen 1 or USB 3.0 host device; Results may vary based on host device, file attributes and other factors]
-
Use Windows recovery only for wider failures
When Windows will not boot, system repair fails, or corruption affects the installation broadly, open Settings > System > Recovery (Windows 11) or Settings > Update & Security > Recovery (Windows 10), or boot from Windows recovery media. Options such as Startup Repair, System Restore, uninstalling a recent update, Reset this PC, and reinstalling Windows have different effects. Read the keep-files or remove-everything choice carefully, back up first, and have the BitLocker key available. Microsoft gives a typical recovery-option duration of about 30 minutes to 2 hours, but hardware, download speed, and the chosen operation can make it longer.
If Windows cannot create or boot its recovery environment, prepare a recovery drive or Windows installation USB on another working computer. Installation media requires at least an 8 GB USB drive. A reset or reinstall can remove applications and personal files, so treat it as a last resort for an Access Denied message.
Free tools Windows power users keep installed
One-click scans. No signup required.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Which Windows fix should I try first?
Use the smallest intervention that matches the evidence. This table compares the main routes by cause, risk, privilege, and scope.
| Likely cause | First action | What you need | Typical scope and risk |
|---|---|---|---|
| Application lock or sync conflict | Close the app, pause sync, restart, and retry | Access to the account and resource | One file; low risk |
| Network or removable-drive path | Reconnect storage or share and verify the server or cable | Network or device access | One share or drive; low risk |
| Wrong owner or ACL | Inspect Security settings, then use takeown or icacls narrowly |
Authorization and an elevated account | One object or tree; permission changes can expose or block data |
| BitLocker encryption | Locate the matching recovery key | 48-digit key and its key ID | Entire encrypted volume; ACL edits have no effect |
| Windows component corruption | Run DISM, then SFC | Elevated prompt; uninterrupted time | System files; moderate repair risk |
| File-system or bad-sector errors | Back up, then run CHKDSK with the appropriate switch | Elevated prompt and a correct drive letter | Whole volume; repair can take time and stress a failing disk |
| Unbootable or broadly damaged Windows | Recovery environment, reset, or reinstall | Backup, BitLocker key, and possibly an 8 GB-or-larger USB | Whole installation; highest chance of removing apps or files |
What should I avoid when repairing Access Denied?
- Do not take ownership of another person’s or organization’s data without explicit authorization.
- Do not run recursive
/ror/tcommands from a broad root such as an entire system drive unless you have a documented reason and a backup. - Do not replace a specific permission with Everyone:Full control; it can expose private data and weaken system protections.
- Do not format, reset, or reinstall before checking for backups and locating the BitLocker recovery key.
- Do not keep writing to a drive that is clicking, disconnecting, or reporting repeated I/O errors; preserve readable data first.
- Do not assume an administrator account can bypass encryption, a server-side share restriction, or an explicit organizational policy.
When should I stop troubleshooting and get help?
Stop and seek the data owner, your organization’s administrator, or a qualified technician when the path contains regulated or business data, the drive is physically failing, the BitLocker key is missing, or ownership changes would affect many users. A professional can work from a disk image or recovery workflow instead of experimenting on the only copy. If the problem began after malware symptoms, use a reputable antivirus product separately; permission repair is not malware removal.
As an optional shortcut after you have backed up important data, Outbyte PC Repair can attempt common Windows issue repairs and settings cleanup, and includes an app-crash log; it complements an antivirus rather than replacing one. It offers a free trial by category for at least two days, then requires a subscription, and results vary—no tool repairs every crash or access problem.
Frequently asked questions
Can Safe Mode fix a file that says Access Denied?
Safe Mode can prevent a third-party startup program or synchronization client from holding a file, so it is useful when the denial disappears there. It does not change NTFS ownership, decrypt BitLocker, or repair a damaged volume; those conditions still require the corresponding steps above.
Will taking ownership delete the original owner’s files?
Taking ownership changes the security principal recorded as owner; it does not, by itself, delete file contents. However, changing ACLs afterward can let an account modify or remove those files, so record the original entries and obtain authorization before making the change.
Why can I read a network folder but not save to it?
Reading and writing are separate permissions. The share permission and the server’s NTFS permission are evaluated together, and the more restrictive result applies. Ask the server administrator to check both layers and your group membership instead of changing permissions on your local computer.
Does “Reset this PC” keep my personal files?
Windows offers a “Keep my files” choice, but it removes applications and settings and is not a substitute for a backup. A reset can still fail or require the BitLocker key, while “Remove everything” is designed to erase personal data; verify the selected option and preserve a separate copy first.
Frequently Asked Questions
Can Safe Mode fix a file that says Access Denied?
Safe Mode can prevent a third-party startup program or synchronization client from holding a file, so it is useful when the denial disappears there. It does not change NTFS ownership, decrypt BitLocker, or repair a damaged volume; those conditions still require the corresponding steps above.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsWill taking ownership delete the original owner’s files?
Taking ownership changes the security principal recorded as owner; it does not, by itself, delete file contents. However, changing ACLs afterward can let an account modify or remove those files, so record the original entries and obtain authorization before making the change.
Why can I read a network folder but not save to it?
Reading and writing are separate permissions. The share permission and the server’s NTFS permission are evaluated together, and the more restrictive result applies. Ask the server administrator to check both layers and your group membership instead of changing permissions on your local computer.
Does “Reset this PC” keep my personal files?
Windows offers a “Keep my files” choice, but it removes applications and settings and is not a substitute for a backup. A reset can still fail or require the BitLocker key, while “Remove everything” is designed to erase personal data; verify the selected option and preserve a separate copy first.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
