ACL

ACL's dictate all objects privileges and permissions (what can you do, where can you go)

This is based on

• Access Tokens (security context of a process - identity and privs of user)

• Security Descriptors (SID of the owner, Discretionary ACL (DACL) and System ACL (SACL))

SACL - Logs success and failure audit messages when an object is accessed

DACL - Defines permission and privileges