5.1 LDAP Security
References
LDAP attributes: userPassword, sAMAccountName, userPrincipalName, uPNSuffixes, supported Capabilities, servicePrincipalName, nTSecurityDescriptor, schemaIDGUID, attributeSecurityGUID, dSHeuristics, validAccesses, rightsGuid, appliesTo: [MS-ADA1], [MS-ADA2], [MS-ADA3]
LDAP object class controlAccessRight: [MS-ADSC]
ACCESS_MASK structure and access right bits: [MS-DTYP] section 2.4.3
ACE structure: [MS-DTYP] section 2.4.4
ACL structure: [MS-DTYP] section 2.4.5
SECURITY_DESCRIPTOR structure: [MS-DTYP] section 2.4.6