This overview describes the Windows NT version 4.0 security functions for working with security descriptors and access-control lists (ACLs).
The access control model is basically the same for all versions of Windows NT. For a description of the model, see Access-Control Model.