In Active Directory there are some very confusing value formats. The title of "Most Confusing" should probably be awarded to the NtSecurityDescriptor attribute. It exists on LDAP objects in Active Directory and describes permissions against the object in Security Descriptor (binary) form. It contain...

Continue reading...