Sometimes you hear about System Access Control Lists, as opposed to Discretionary Access Control Lists. DACLs (which are just your standard ACLs) contain object permissions, like who can read or write a file. SACLs say what kinds of access from which people will be written to the event log in auditing events. That is, SACLs don't affect who can access a file, just whose attempted access to it will produce audit entries.
You can find the SACL for a file on the Auditing tab of its Advanced Security Settings dialog, which appears when you press the Advanced button on the Security tab of the file's Properties window.
No comments:
Post a Comment