Contains security information associated with a Securable Object.

The descriptor consists of a SECURITY_DESCRIPTOR structure and its associated security information, which can include the following:

  • Security Identifiers (SIDs) for the owner and primary group of the object.
  • A DACL
  • A SACL
  • A set of control bits that qualify (adds interpretation to) the meaning of the descriptor or its individual members.