Share via


Exchange Store XML Security Descriptor Format

Topic Last Modified: 2006-06-12

Each item in the Exchange store has an associated security descriptor that you can access in XML format using the Exchange OLE DB (ExOLEDB) provider or WebDAV. Any client that can parse and assemble well-formed XML strings that follow the security grammar discussed in this and the following topics can examine and modify the item's descriptor, privileges permitting. For example, all clients that have Microsoft® Internet Explorer 5 have access to the Microsoft XML (MSXML) Component Object Model (COM) component that contains an XML Document Object Model (DOM) parser, the XMLHTTP COM class, and various other XML-related tools.

The following example provides an outline of the security descriptor grammar in XML. All elements and attributes reside in the https://schemas.microsoft.com/exchange/security/ Namespace.

<security_descriptor xmlns="https://schemas.microsoft.com/security/">
 <revision>...</revision>
 <owner>...</owner>
 <group>...</group>
 <dacl>...</dacl>
 <sacl>...<sacl>
</security_descriptor>

The structure of the descriptor closely follows the standard structure for Microsoft Windows® server operating systems security descriptors.