2.5.1 Security Descriptor Description Language

The SECURITY_DESCRIPTOR structure is a compact binary representation of the security associated with an object in a directory or on a file system, or in other stores. It is not, however, convenient for use in tools that operate primarily on text strings. Therefore, a text-based form of the security descriptor is available for situations when a security descriptor must be carried by a text method. This format is the Security Descriptor Description Language (SDDL).<79>

For more information on SDDL for Device Objects, see [MSDN-SDDLforDevObj].