NTFS Permissions Reset When Reconnecting an External Drive

Quick answer: Run takeown /f "E:\*" /r /d y and icacls "E:\*" /grant "%USERNAME%":F /t in an admin Command Prompt, replacing E: with your drive letter.

Why This Happens

You plug in an external drive. It works fine. You disconnect it properly—click the "Safely Remove Hardware" icon, wait for the notification. Next time you connect it? "Access Denied." You're staring at a folder you can't open, even though you own the computer and you're the admin.

The root cause: Windows remembers NTFS permissions by the drive's signature in the registry. When you disconnect a USB drive, Windows sometimes clears that signature from its cached device database. On reconnect, it sees a "new" drive with no stored owner. By default, it sets the owner to the SYSTEM account, and if your user account doesn't have explicit permissions, you're locked out.

This isn't a virus. It's not a hardware failure. It's Windows being overly cautious about security—treating every reconnect as a potential threat. I've seen this on Windows 10 (all builds) and Windows 11. It's especially common with Seagate Backup Plus and WD My Passport drives, but it can hit any USB hard drive formatted as NTFS.

Fix: Take Ownership and Grant Full Control

Here's the fix. These steps assume your drive is E:. Change that to your actual drive letter (check in File Explorer or Disk Management).

1. Open Command Prompt as Administrator. Click Start, type cmd, right-click "Command Prompt", then select "Run as administrator." Click Yes on the UAC prompt.
2. Type takeown /f "E:\*" /r /d y and press Enter. This says "take ownership of everything on E: drive, recursively, and answer yes to all prompts." You'll see a list of files and folders being processed. Wait until it finishes—could take a few minutes if the drive is large.
3. Next, type icacls "E:\*" /grant "%USERNAME%":F /t and press Enter. This grants your current user Full Control over all the files and folders. The /t flag makes it apply to subfolders too.
4. After it finishes, close Command Prompt.
5. Open File Explorer, click on your external drive. You should now have access. If you still see errors, reboot your computer and try again.

After these commands, you own the drive. But here's the thing: this only fixes the current state. If you disconnect and reconnect, the same problem could come back. That's because Windows still doesn't have a permanent owner set for the drive itself (not just the files).

Set Ownership on the Drive Root

To make the fix stick, you also need to take ownership of the root of the drive. Run this after the above steps:

takeown /f E:\ && icacls E:\ /grant "%USERNAME%":F

This one-two punch sets the drive folder itself to have explicit ownership. After this, reconnects should work.

Why the Main Fix Might Fail

Sometimes the takeown command throws errors like "Access Denied" or "The system cannot find the path specified." If that happens:

• Your drive might be RAW, not NTFS. Check in Disk Management (right-click Start > Disk Management). If the file system says RAW, you can't fix permissions—you need to recover data first (try chkdsk E: /f) or reformat the drive (which wipes everything).
• You might not be the actual administrator. Even if your account says "Administrator," Windows 10/11 has a hidden built-in Administrator account. Enable it by running net user administrator /active:yes in an admin Command Prompt, then log into that account and try the commands again.
• The drive might be encrypted. BitLocker or third-party encryption (like Veracrypt) locks the drive. You must unlock it first (enter your password) before you can take ownership.

Alternative Fix: Use Third-Party Permission Tools

If command-line stuff makes you nervous, you can use free tools like NTFS Permissions Reporter or SetACL (the GUI version). They do the same thing but with checkboxes. I don't love them because they add bloat, but they work.

For a one-off fix, the command-line method is faster. For recurring problems, consider changing the drive format to exFAT instead of NTFS. exFAT doesn't have file-level permissions—every user can read and write. The trade-off: no encryption, no file compression, and no journaling (so corruption is more likely if you yank the cable).

Prevention: Stop It From Happening Again

You can't fully prevent Windows from resetting NTFS permissions on reconnect. But you can minimize the odds:

• Always use "Safely Remove Hardware" and wait for the "Safe to Remove" message. Yanking the cable without ejecting increases the chance of the signature being cleared.
• Assign a permanent drive letter. Go to Disk Management, right-click the drive, choose "Change Drive Letter and Paths," pick a letter like Z: or X: (letters at the end of the alphabet are less likely to conflict). This doesn't fix permissions directly, but a consistent letter reduces confusion.
• Set the drive to be "offline" in Disk Management when not in use. Right-click the drive, select "Offline." When you need it, set it back to "Online." This forces Windows to re-read the full device descriptor each time, which sometimes triggers ownership re-evaluation in your favor.
• If the drive stays connected to the same USB port, it's less likely to reset. Don't switch ports. Each port has its own device ID in Windows. Switching ports is like introducing the drive as a stranger every time.

One last thing: if this happens every single time you reconnect, your drive might be dying. The drive controller could be failing, causing Windows to misidentify it on each plug. Run a SMART check with wmic diskdrive get status in Command Prompt. If it says "Bad" or "Pred Fail," back up your data now and replace the drive.