Overview [1]#

System Access Control List (SACL) enables administrators to logging attempts to access a secured object.

Each Access Control Entry specifies the Access Control Entry Types attempts by a specified trustee that cause the system to generate a record in the Windows Security Log Event.

An Access Control Entry in a System Access Control List can generate audit records when an access attempt fails, when it succeeds, or both.

System Access Control List are a component of the Security Descriptor

More Information#

There might be more information for this subject on one of the following:

• Access Control Entry
• Access Control Entry Type
• Access Control List
• MS Access Mask
• Mandatory Integrity Control
• SACL
• SACL_SECURITY_INFORMATION
• Security Descriptor

---

• [#1] - Access Control Lists - based on information obtained 2016-08-10