SubInAcl Topics | Previous | Next

SIDs in SubInAcl

The security descriptor references a user group with a security identifier (SID). A SID can be expressed in one of the following forms:

• DomainName\Account (for example, DOM\Administrators)
• StandaloneServer\Group
• Account (see LookupAccount API)
• s-1-x-x-x-x
  x is expressed in decimal (for example, S-1-5-21-56248481-1302087933-1644394174-1001).
  In this case, no check is done to verify the existence of a given SID.

SubInAcl maintains a local cache of SIDs to minimize SID-to-"Human Name" translation costs for the network.