The SECURITY_DESCRIPTOR structure contains the security information associated with an object. Applications use this structure to set and query an object's security status. See also AtlGetSecurityDescriptor.
Applications should not modify the SECURITY_DESCRIPTOR structure directly, and instead should use the class methods provided.
For an introduction to the access control model in Windows, see Access Control in the Platform SDK.