diff -r 8dde3dcab1e8 Lib/test/test_os.py
--- a/Lib/test/test_os.py	Sun Sep 11 10:06:38 2016 +0000
+++ b/Lib/test/test_os.py	Sun Sep 11 13:57:23 2016 +0000
@@ -456,6 +456,23 @@
             result.st_file_attributes & stat.FILE_ATTRIBUTE_DIRECTORY,
             stat.FILE_ATTRIBUTE_DIRECTORY)
 
+    @unittest.skipUnless(sys.platform == "win32", "Win32 specific tests")
+    def test_access_denied(self):
+        # Default to FindFirstFile WIN32_FIND_DATA when access is
+        # denied. See issue 28075.
+        # os.environ['TEMP'] should be located on a volume that
+        # supports file ACLs.
+        fname = os.path.join(os.environ['TEMP'], self.fname)
+        self.addCleanup(support.unlink, fname)
+        create_file(fname, b"ABC")
+        # Deny the right to [S]YNCHRONIZE on the file to
+        # force CreateFile to fail with ERROR_ACCESS_DENIED.
+        DETACHED_PROCESS = 8
+        subprocess.check_call(
+            ['icacls.exe', fname, '/deny', 'Users:(S)'],
+            creationflags=DETACHED_PROCESS)
+        result = os.stat(fname)
+        self.assertNotEqual(result.st_size, 0)
 
 class UtimeTests(unittest.TestCase):
     def setUp(self):
diff -r 8dde3dcab1e8 Modules/posixmodule.c
--- a/Modules/posixmodule.c	Sun Sep 11 10:06:38 2016 +0000
+++ b/Modules/posixmodule.c	Sun Sep 11 13:57:23 2016 +0000
@@ -1545,7 +1545,9 @@
         /* Either the target doesn't exist, or we don't have access to
            get a handle to it. If the former, we need to return an error.
            If the latter, we can use attributes_from_dir. */
-        if (GetLastError() != ERROR_SHARING_VIOLATION)
+        DWORD lastError = GetLastError();
+        if (lastError != ERROR_ACCESS_DENIED &&
+            lastError != ERROR_SHARING_VIOLATION)
             return -1;
         /* Could not get attributes on open file. Fall back to
            reading the directory. */
@@ -1555,7 +1557,7 @@
         if (info.dwFileAttributes & FILE_ATTRIBUTE_REPARSE_POINT) {
             if (traverse) {
                 /* Should traverse, but could not open reparse point handle */
-                SetLastError(ERROR_SHARING_VIOLATION);
+                SetLastError(lastError);
                 return -1;
             }
         }