. . . "The counterpart of the user???s access token is the security descriptor attached to resources such as files or printers." . .