ControlFlags
These flags affect the security descriptor behavior.
Specifies that the Discretionary Access Control List (DACL) has been automatically inherited from the parent. Set by resource managers only.
Ignored.
Specifies that the DACL was obtained by a defaulting mechanism. Set by resource managers only.
Specifies that the DACL is not null. Set by resource managers or users.
DiscretionaryAclProtected = 4096
Specifies that the resource manager prevents auto-inheritance. Set by resource managers or users.
Ignored.
GroupDefaulted = 2
Specifies that the group SecurityIdentifier was obtained by a defaulting mechanism. Set by resource managers only; should not be set by callers.
None = 0
No control flags.
OwnerDefaulted = 1
Specifies that the owner SecurityIdentifier was obtained by a defaulting mechanism. Set by resource managers only; should not be set by callers.
RMControlValid = 16384
Specifies that the contents of the Reserved field are valid.
SelfRelative = 32768
Specifies that the security descriptor binary representation is in the self-relative format. This flag is always set.
ServerSecurity = 128
Ignored.
SystemAclAutoInherited = 2048
Specifies that the System Access Control List (SACL) has been automatically inherited from the parent. Set by resource managers only.
Ignored.
SystemAclDefaulted = 32
Specifies that the SACL was obtained by a defaulting mechanism. Set by resource managers only.
SystemAclPresent = 16
Specifies that the SACL is not null. Set by resource managers or users.
SystemAclProtected = 8192
Specifies that the resource manager prevents auto-inheritance. Set by resource managers or users.