Security Strategies in Windows Platforms and Applications, 3rd Edition

Windows Objects and Access Controls

One of the primary security features of Windows is the ability to control access to resources. In a Windows environment, every resource where access can be controlled is defined as a securable object. There are many types of securable objects in Windows, including both named and unnamed objects. The most common securable objects include:

• NTFS files and folders

• Pipes, named or unnamed

• Processes and threads

• Registry keys

• Windows services

• Printers, both local and remote

• Network shares

• Job objects

Windows DACLs

A securable object requires a DACL for Windows to control access to the object. Any object with no DACL defined is accessible by any subject—any process, any user. An object’s DACL is a collection ...