Reviewing AD ACLs: Principals, Objects, Effective Rights and Evidence
Review an AD permission candidate with the principal SID, target object, property scope and inheritance recorded. Use the candidate record to separate directory observations, effective-rights questions and separately permitted validation.