How to Understand Those Confusing Windows 7 File/Share Permissions

The Windows Operating systems use SIDs to represent all security principles. SIDs are just variable length strings of alphanumeric characters that represent machines, users and groups. SIDs are added to ACLs(Access Control Lists) every time you grant a user or group permission to a file or folder. Behind the scene SIDs are stored the same way all other data object are, in binary. However when you see a SID in Windows it will be displayed using a more readable syntax. It is not often that you will see any form of SID in Windows, the most common scenario is when you grant someone permission to a resource, then their user account is deleted, it will then show up as a SID in the ACL. So lets take a look at the typical format in which you will see SIDs in Windows.

CLICK HERE for the full article


  1. I am totally confused when it comes to understanding Windows 7 file sharing permission. Your post really helped me a lot in understanding these terms. I am now bit confident about these file sharing terminologies. Thanks for helping me.
    digital signature Microsoft


Post a Comment