Microsoft Windows environment implements access control by assigning security descriptors to objects stored in Active Directory A Security Descriptor is a set of information attached to every object and contains four security components