Provider-Independent and Windows NT Access Rights

The following tables map the Windows NT access rights for the various object types to the corresponding provider-independent access rights.

The following table shows the standard access rights.

Windows NT standard rights Provider-independent rights
DELETE ACTRL_DELETE
READ_CONTROL ACTRL_READ_CONTROL
SYNCHRONIZE ACTRL_SYNCHRONIZE
WRITE_DAC ACTRL_CHANGE_ACCESS
WRITE_OWNER ACTRL_CHANGE_OWNER

The following table shows the access rights for file objects.

Windows NT file rights Provider-independent rights
FILE_APPEND_DATA ACTRL_FILE_APPEND
FILE_EXECUTE ACTRL_FILE_EXECUTE
FILE_READ_ATTRIBUTES ACTRL_FILE_READ_ATTRIB
FILE_READ_DATA ACTRL_FILE_READ
FILE_READ_EA ACTRL_FILE_READ_PROP
FILE_WRITE_ATTRIBUTES ACTRL_FILE_WRITE_ATTRIB
FILE_WRITE_DATA ACTRL_FILE_WRITE
FILE_WRITE_EA ACTRL_FILE_WRITE_PROP

The following table shows the access rights for directory objects.

Windows NT directory rights Provider-independent rights
FILE_ADD_SUBDIRECTORY ACTRL_DIR_CREATE_CHILD
FILE_ADD_FILE ACTRL_DIR_CREATE_OBJECT
FILE_DELETE_CHILD ACTRL_DIR_DELETE_CHILD
FILE_LIST_DIRECTORY ACTRL_DIR_LIST
FILE_TRAVERSE ACTRL_DIR_TRAVERSE

The following table shows the access rights for registry key.

Windows NT registry key rights Provider-independent rights
KEY_CREATE_LINK ACTRL_REG_LINK
KEY_CREATE_SUB_KEY ACTRL_REG_CREATE_CHILD
KEY_ENUMERATE_SUB_KEYS ACTRL_REG_LIST
KEY_NOTIFY ACTRL_REG_NOTIFY
KEY_QUERY_VALUE ACTRL_REG_QUERY
KEY_SET_VALUE ACTRL_REG_SET

The following table shows the access rights for event objects.

Windows NT event rights Provider-independent rights
EVENT_MODIFY_STATE ACTRL_KERNEL_SET_INFO
SYNCHRONIZE ACTRL_SYNCHRONIZE

The following table shows the access rights for semaphore objects.

Windows NT semaphore rights Provider-independent rights
SEMAPHORE_MODIFY_STATE ACTRL_KERNEL_SET_INFO
SYNCHRONIZE ACTRL_SYNCHRONIZE

The following table shows the access rights for mutex objects.

Windows NT mutex rights Provider-independent rights
MUTEX_MODIFY_STATE ACTRL_KERNEL_SET_INFO
SYNCHRONIZE ACTRL_SYNCHRONIZE

The following table shows the access rights for timer objects.

Windows NT timer rights Provider-independent rights
TIMER_MODIFY_STATE ACTRL_KERNEL_SET_INFO
SYNCHRONIZE ACTRL_SYNCHRONIZE

The following table shows the access rights for thread objects.

Windows NT thread rights Provider-independent rights
THREAD_ALERT ACTRL_KERNEL_ALERT
THREAD_DIRECT_IMPERSONATION ACTRL_KERNEL_DIMPERSONATE
THREAD_GET_CONTEXT ACTRL_KERNEL_GET_CONTEXT
THREAD_IMPERSONATE ACTRL_KERNEL_IMPERSONATE
THREAD_QUERY_INFORMATION ACTRL_KERNEL_GET_INFO
THREAD_SET_CONTEXT ACTRL_KERNEL_SET_CONTEXT
THREAD_SET_INFORMATION ACTRL_KERNEL_SET_INFO
THREAD_SET_THREAD_TOKEN ACTRL_KERNEL_TOKEN
THREAD_SUSPEND_RESUME ACTRL_KERNEL_CONTROL
THREAD_TERMINATE ACTRL_KERNEL_KILL

The following table shows the access rights for process objects.

Windows NT process rights Provider-independent rights
PROCESS_CREATE_PROCESS ACTRL_KERNEL_PROCESS
PROCESS_CREATE_THREAD ACTRL_KERNEL_THREAD
PROCESS_DUP_HANDLE ACTRL_KERNEL_DUP_HANDLE
PROCESS_QUERY_INFORMATION ACTRL_KERNEL_GET_INFO
PROCESS_SET_INFORMATION ACTRL_KERNEL_SET_INFO
PROCESS_TERMINATE ACTRL_KERNEL_KILL
PROCESS_VM_OPERATION ACTRL_KERNEL_VM
PROCESS_VM_READ ACTRL_KERNEL_VM_READ
PROCESS_VM_WRITE ACTRL_KERNEL_VM_WRITE

The following table shows the access rights for printer objects.

Windows NT printer rights Provider-independent rights
JOB_ACCESS_ADMINISTER ACTRL_PRINT_JADMIN
PRINTER_ACCESS_ADMINISTER ACTRL_PRINT_PADMIN
PRINTER_ACCESS_USE ACTRL_PRINT_PUSE
SERVER_ACCESS_ADMINISTER ACTRL_PRINT_SADMIN
SERVER_ACCESS_ENUMERATE ACTRL_PRINT_SLIST

The following table shows the access rights for Win32 service objects.

Windows NT service rights Provider-independent rights
SERVICE_CHANGE_CONFIG ACTRL_SVC_SET_INFO
SERVICE_ENUMERATE_DEPENDENTS ACTRL_SVC_LIST
SERVICE_INTERROGATE ACTRL_SVC_INTERROGATE
SERVICE_PAUSE_CONTINUE ACTRL_SVC_PAUSE
SERVICE_QUERY_CONFIG ACTRL_SVC_GET_INFO
SERVICE_QUERY_STATUS ACTRL_SVC_STATUS
SERVICE_START ACTRL_SVC_START
SERVICE_STOP ACTRL_SVC_STOP
SERVICE_USER_DEFINED_CONTROL ACTRL_SVC_UCONTROL

The following table shows the access rights for window station objects.

Windows NT window station rights Provider-independent rights
WINSTA_ACCESSCLIPBOARD ACTRL_WIN_CLIPBRD
WINSTA_ACCESSGLOBALATOMS ACTRL_WIN_GLOBAL_ATOMS
WINSTA_CREATEDESKTOP ACTRL_WIN_CREATE
WINSTA_ENUMDESKTOPS ACTRL_WIN_LIST_DESK
WINSTA_ENUMERATE ACTRL_WIN_LIST
WINSTA_EXITWINDOWS ACTRL_WIN_EXIT
WINSTA_READATTRIBUTES ACTRL_WIN_READ_ATTRIBS
WINSTA_READSCREEN ACTRL_WIN_SCREEN
WINSTA_WRITEATTRIBUTES ACTRL_WIN_WRITE_ATTRIBS

The following table shows the access rights for directory service objects.

Windows NT DS object rights Provider-independent rights
DS_CREATE_CHILD ACTRL_DS_CREATE_CHILD
DS_DELETE_CHILD ACTRL_DS_DELETE_CHILD
DS_LIST_CONTENTS ACTRL_DS_LIST
DS_OPEN ACTRL_DS_OPEN
DS_READ_PROPERTY ACTRL_DS_READ_PROP
DS_SELF_WRITE ACTRL_DS_SELF
DS_WRITE_PROPERTY ACTRL_DS_WRITE_PROP