A security descriptor contains the security information associated with an object. This information can include an owner, a primary group, a discretionary access-control list (DACL), and a system access-control list (SACL). This information is stored in the form of security identifiers (SIDs) and access-control lists (ACLs). For more information, see Security Identifiers (SIDs) and Access-Control Lists (ACLs).