diff --git a/extensions/ide/vscode/devbox/CHANGELOG.md b/extensions/ide/vscode/devbox/CHANGELOG.md
index 4e427795af5..50d5523edb7 100644
--- a/extensions/ide/vscode/devbox/CHANGELOG.md
+++ b/extensions/ide/vscode/devbox/CHANGELOG.md
@@ -10,6 +10,10 @@ Check [Keep a Changelog](http://keepachangelog.com/) for recommendations on how
 
 - Adjust `Remote-SSH` to install by code.
 
+### Fixed
+
+- Fix Windows file authority issue caused by `Everyone` group.
+
 ## [1.2.1] - 2024-12-4
 
 ### Fixed
diff --git a/extensions/ide/vscode/devbox/package.json b/extensions/ide/vscode/devbox/package.json
index ecc9d429b93..55ed9468b7c 100644
--- a/extensions/ide/vscode/devbox/package.json
+++ b/extensions/ide/vscode/devbox/package.json
@@ -2,7 +2,7 @@
   "name": "devbox-aio",
   "displayName": "%displayName%",
   "description": "%description%",
-  "version": "1.3.2024120601",
+  "version": "1.3.2024122401",
   "keywords": [
     "devbox",
     "remote development",
diff --git a/extensions/ide/vscode/devbox/src/utils/file.ts b/extensions/ide/vscode/devbox/src/utils/file.ts
index b6b888b19c5..f1daf601a80 100644
--- a/extensions/ide/vscode/devbox/src/utils/file.ts
+++ b/extensions/ide/vscode/devbox/src/utils/file.ts
@@ -13,9 +13,9 @@ export const ensureFileAccessPermission = async (path: string) => {
       if (!username) {
         throw new Error('can not get username')
       }
-      // await execa('icacls', [path, '/inheritance:r'])
       // await execa('icacls', [path, '/grant:r', `${username}:F`])
-      // await execa('icacls', [path, '/remove:g', 'everyone'])
+      await execa('icacls', [path, '/inheritance:d'])
+      await execa('icacls', [path, '/remove:g', 'everyone'])
     } catch (error) {
       Logger.error(`Failed to set file access permission: ${error}`)
     }
@@ -40,7 +40,7 @@ export function ensureFileExists(filePath: string, parentDir: string) {
       recursive: true,
     })
     fs.writeFileSync(filePath, '', 'utf8')
-    // .ssh/config authority
-    ensureFileAccessPermission(filePath)
   }
+  // .ssh/config authority
+  ensureFileAccessPermission(filePath)
 }