SMB Security Descriptors - microsoft/SMBSecurity GitHub Wiki

A security descriptor (SD) is used to define permissions for an object or service within Windows. SMB uses SDs to control access to the file and print server settings within Windows.

There are currently fourteen (14) SDs in Windows, as of Windows Server 2022 and Windows 11 22H2. These are:

• SrvsvcConfigInfo
• SrvsvcConnection
• SrvsvcFile
• SrvsvcServerDiskEnum
• SrvsvcSessionInfo
• SrvsvcShareAdminConnect
• SrvsvcShareAdminInfo
• SrvsvcShareChange
• SrvsvcShareConnect
• SrvsvcShareFileInfo
• SrvsvcSharePrintInfo
• SrvsvcStatisticsInfo
• SrvsvcTransportEnum
• SrvsvcDefaultShareInfo

Click on an SD to go to the description of the SD and how it affects SMB in Windows.