XML Security Descriptor XML Elements
Exchange Server 2003
Each item's security descriptor is represented in XML with the elements and attributes listed in the tables in this and the following topics. Each security descriptor is expressed using the XML syntax described in the topic Security Identifiers in XML. Note that all items and attributes reside in the http://schemas.microsoft.com/security/ namespace.
| Element name | Possible child elements or contents |
|---|---|
| security_descriptor | Revision, Owner, Group, dacl, sacl, |
| revision | Decimal number (32 bits) |
| owner Attributes: defaulted=boolean | sid (see Security Identifiers in XML) |
| primary_group Attributes: defaulted=boolean | sid (see Security Identifiers in XML) |
| dacl Attributes: defaulted=boolean protected=boolean autoinherited=boolean | revision, effective_aces, subcontainer_inheritable_aces, subitem_inheritable_aces, (See Discretionary Access Control Lists XML Elements) |
| sacl Attributes: defaulted=boolean protected=boolean autoinherited=boolean | revision, audit_always, audit_on_failure, audit_on_success, |
| audit_always | (See System Audit Control Lists XML Elements) |
| audit_on_failure | (See System Audit Control Lists XML Elements) |
| audit_on_success | (See System Audit Control Lists XML Elements) |