| TABLE 1: Object Access Types |
| Access Type |
Meaning |
| WRITE_DAC |
The user might have modified the object's DACL. |
| WRITE_OWNER |
The user might have attempted to take ownership of an object. |
| READ_CONTROL |
The user might have viewed or the application might have read the object's owner, DACL, or SACL. |
| DELETE |
The user probably deleted the object or moved a file or folder. |
| SYNCHRONIZE |
An application wants to be notified of any operations on the object. |