An Access Control Entry in a System Access Control List can generate audit records when an access attempt fails, when it succeeds, or both.
System Access Control List are a component of the Security Descriptor
More Information#There might be more information for this subject on one of the following:
- Access Control Entry
- Access Control Entry Type
- Access Control List
- MS Access Mask
- Security Descriptor