Windows 安全标识符(国外英语资料).docVIP

Windows 安全标识符(国外英语资料) Article number: 243330 - final amendment: January 23, 2006 - Amendment: 10.1 Common security identifiers in the Windows operating system outline The security identifier (SID) is the unique value of variable length, used to identify the security body or security group in the Windows operating system. A common SID is a group of SID that identifies a common user or a generic group. Their values are the same in all operating systems. This information can be used to solve security issues and can also be used to resolve potential display problems in the ACL editor. In the ACL editor, SID may be displayed, not the user or group name. Common SID: SID:S-1-0 Name: Null Authority Description: identifier authority. SID:S-1-0-0 Name: Nobody Description: no security subjects. SID:S-1-1 Name: World Authority Description: identifier authority. SID:S-1-1-0 Name: Everyone Description: a group that includes all users (even anonymous users and visitors). Membership is controlled by the operating system. Note: by default, the Everyone group no longer includes anonymous users on the computer running Windows XP Service Pack 2 (SP2). SID:S-1-2 Name: Local Authority Description: identifier authority. SID:S-1-3 Name: Creator Authority Description: identifier authority. SID:S-1-3-0 Name: Creator Owner Explanation: a placeholder in an inheritable access control item (ACE). When ACE is inherited, the system replaces the SID with the SID of the object creator. SID:S-1-3-1 Name: Creator Group Description: inheritable placeholders in ACE. When ACE is inherited, the system replaces the SID with the SID of the main group of the object creator. The main group is for POSIX subsystem only. SID:S-1-3-2 Name: Creator Owner Server Explanation: this SID is not used in Windows 2000. SID:S-1-3-3 Name: Creator Group Server Explanation: this SID is not used in Windows 2000. SID:S-1-4 Name: Non-unique Authority Description: identifier authority. SID:S-1-5 Name: NT Authority Description: id