3.1.1.2.2.2.6 String(NT-Sec-Desc)

A value with this syntax contains a Windows security descriptor in binary form. The binary form is that of a SECURITY_DESCRIPTOR structure and is specified in [MS-DTYP] section 2.4.6. It is otherwise encoded the same as the String(Octet) syntax.