How to Fix Access Denied on Windows 10: 6 Quick Solutions

Access Denied on Windows 10 usually means your account or the app you are using does not have the permission required to open, change, delete, or run something. The fastest fix is to identify whether the block comes from administrator rights, NTFS permissions, file ownership, encryption, damaged Windows components, or a broken user profile.

Before changing permissions, make sure the file or folder is yours to manage. Avoid granting broad access to system folders or using these steps to bypass restrictions on a work-managed PC. Also note that standard Windows 10 support ended on October 14, 2025. Consider moving to a supported Windows version or an eligible Extended Security Updates option.

1. Use the right account and run the app as administrator

If the error appears only when launching a program, installer, Command Prompt, or maintenance tool, try elevation first. Sign in with an administrator account if the task genuinely requires administrative access, then search for the app, right-click it, and choose Run as administrator.

Elevation does not change file ownership or decrypt encrypted data. If File Explorer still says Access Denied, continue below.

2. Check NTFS permissions on the file or folder

Windows controls file access through permissions, ownership, and access control lists (ACLs). See Microsoft’s access control overview.

1. Right-click the affected file or folder and choose Properties.
2. Open the Security tab and select your account.
3. Check whether the required permission is allowed. For ordinary documents, Modify is usually enough; Full control is not always necessary.
4. If you are allowed to change permissions, choose Edit or Advanced, add your account if needed, and apply the minimum access required.

For a network share, share permissions and NTFS permissions are separate; a managed folder may require its owner or IT administrator to change access.

3. Take ownership if the owner is wrong

If files came from another Windows installation, backup, or old account, the recorded owner may be wrong. In Properties > Security > Advanced, choose Change next to Owner, select your account, and apply it. For a folder tree, replace the owner on subcontainers and objects only when you intend to change the whole tree.

You can also use an elevated Command Prompt. Microsoft documents takeown for recovering ownership and icacls for modifying file permissions:

takeown /f "C:\Example" /r /d y
icacls "C:\Example" /grant "%USERNAME%":(OI)(CI)F /t

Replace C:\Example with the exact target path. The second command grants Full control recursively, so use it only on data you are authorized to manage. Do not run recursive ownership or Full control changes against C:\Windows, C:\Program Files, or an entire system drive just to fix one inaccessible folder.

4. Check whether EFS encryption is blocking access

Ownership is not the same as decryption. Windows Encrypting File System (EFS) protects data with a certificate and private key. Right-click the file or folder, choose Properties > Advanced, and check Encrypt contents to secure data. Microsoft notes that this file-encryption feature is not available in Windows Home editions; see the official file encryption guide.

If EFS is enabled under another account or installation, taking ownership will not decrypt the data. You need the original EFS certificate/private key or a configured recovery certificate. Do not delete old profiles or certificates until recovery is complete.

5. Repair Windows components with DISM and SFC

If Access Denied affects built-in Windows tools or appears with other operating-system errors, damaged system files may be involved. Skip this step for a single personal file with a simple permission problem.

Open Command Prompt as administrator and run Microsoft’s recommended repair sequence:

DISM.exe /Online /Cleanup-image /Restorehealth
sfc /scannow

Run DISM first, wait for it to finish, then run SFC and allow verification to reach 100%. Microsoft explains the sequence in its System File Checker repair instructions.

6. Test with a new local user profile

If the same files work for another administrator but repeatedly fail under your normal account, the user profile or its permission mappings may be damaged. On Windows 10, open Settings > Accounts > Family & other users, choose Add someone else to this PC, and create a test account. Microsoft’s user account guide explains how to add local and Microsoft accounts.

Sign in to the new account and test the same file or app. If it works there, migrate your personal data carefully. Do not delete the old profile until required files and encryption keys are safely recovered.

Avoid these risky shortcuts

• Do not disable User Account Control or give Everyone Full control just to silence prompts.
• Do not recursively take ownership of the whole Windows drive for a one-folder problem.
• Ownership cannot bypass EFS encryption or replace the required decryption key.

For most Windows 10 Access Denied errors, the correct fix is narrow: elevate the specific app when needed, repair the target folder’s permissions or owner, and use system repair only when Windows itself is malfunctioning.