OWNER_RIGHTS A group that represents the current owner of the object. When an ACE that carries this SID S-1-3-4 is applied to an object, the system ignores the implicit READ_CONTROL and WRITE_DAC permissions for the object owner. NT_AUTHORITY A SID containing only the SECURITY_NT_AUTHORITY identifier S-1-5 authority. DIALUP A group that includes all users who have logged on through a dial-up connection. S-1-5-1 NETWORK A group that includes all users who have logged on through a network connection. S-1-5-2 BATCH A group that includes all users who have logged on through a batch queue facility. S-1-5-3 INTERACTIVE A group that includes all users who have logged on interactively. S-1-5-4 LOGON_ID A logon session. The X and Y values for these SIDs are different for each logon session and S-1-5-5-x-y are recycled when the operating system is restarted. SERVICE A group that includes all security principals that have logged on as a service. S-1-5-6 ANONYMOUS A group that represents an anonymous logon. S-1-5-7 PROXY Identifies a SECURITY_NT_AUTHORITY Proxy.<8> S-1-5-8 ENTERPRISE_DOMAIN_CONTROLLERS A group that includes all domain controllers in a forest that uses an Active Directory S-1-5-9 directory service. PRINCIPAL_SELF A placeholder in an inheritable ACE on an account object or group object in Active S-1-5-10 Directory. When the ACE is inherited, the system replaces this SID with the SID for the security principal that holds the account. AUTHENTICATED_USERS A group that includes all users whose identities were authenticated when they S-1-5-11 logged on. RESTRICTED_CODE This SID is used to control access by untrusted code. validation against tokens S-1-5-12 with RC consists of two checks, one against the token's normal list of SIDs and one against a second list (typically containing RC - the "RESTRICTED_CODE" token - and a subset of the original token SIDs). Access is granted only if a token passes both tests. Any ACL that specifies RC must also specify WD - the "EVERYONE" token. When RC is paired with WD in an ACL, a superset of
OWNER_RIGHTS S-1-3-4 A group that represents the current owner of the object. When an ACE that carries this SID is applied to an object, the system ignores the implicit READ_CONTROL and WRITE_DAC permissions for the object owner. NT_AUTHORITY S-1-5 A SID containing only the SECURITY_NT_AUTHORITY identifier authority. DIALUP S-1-5-1 A group that includes all users who have logged on through a dial-up connection. NETWORK S-1-5-2 A group that includes all users who have logged on through a network connection. BATCH S-1-5-3 A group that includes all users who have logged on through a batch queue facility. INTERACTIVE S-1-5-4 A group that includes all users who have logged on interactively. LOGON_ID S-1-5-5-x-y A logon session. The X and Y values for these SIDs are different for each logon session and are recycled when the operating system is restarted. SERVICE S-1-5-6 A group that includes all security principals that have logged on as a service. ANONYMOUS S-1-5-7 A group that represents an anonymous logon. PROXY S-1-5-8 Identifies a SECURITY_NT_AUTHORITY Proxy.<8> ENTERPRISE_DOMAIN_CONTROLLERS S-1-5-9 A group that includes all domain controllers in a forest that uses an Active Directory directory service. PRINCIPAL_SELF S-1-5-10 A placeholder in an inheritable ACE on an account object or group object in Active Directory. When the ACE is inherited, the system replaces this SID with the SID for the security principal that holds the account. AUTHENTICATED_USERS S-1-5-11 A group that includes all users whose identities were authenticated when they logged on. RESTRICTED_CODE S-1-5-12 This SID is used to control access by untrusted code. validation against tokens with RC consists of two checks, one against the token's normal list of SIDs and one against a second list (typically containing RC - the "RESTRICTED_CODE" token - and a subset of the original token SIDs). Access is granted only if a token passes both tests. Any ACL that specifies RC must also specify WD - the "EVERYONE" token. When RC is paired with WD in an ACL, a superset of
%5BMS-DTYP%5D-171201.docx