The following LIST SECURITYDESCRIPTOR command displays the
    security descriptor for the root key, HKEY_USERS.

    REG> LIST SECURITYDESCRIPTOR HKEY_USERS

    Security Descriptor:

       Revision:               0x01
       Control:                0x8004 (SE_DACL_PRESENT,
                                       SE_SELF_RELATIVE)
       Owner Sid:              S-1-5-20-220
       Group Sid:              S-1-5-20-220
       Dacl:
          Revision:            0x02
          Size:                0x0048
          Ace Count:           0x0003
          Ace #1:
             Type:             0x00 (ACCESS_ALLOWED_ACE_TYPE)
             Flags:            0x03 (OBJECT_INHERIT_ACE,
                                     CONTAINER_INHERIT_ACE)
             Size:             0x0018
             Access Mask:      0x000f003f (Full Control)
             Sid:              S-1-5-20-220
          Ace #2:
             Type:             0x00 (ACCESS_ALLOWED_ACE_TYPE)
             Flags:            0x03 (OBJECT_INHERIT_ACE,
                                     CONTAINER_INHERIT_ACE)
             Size:             0x0014
             Access Mask:      0x00020019 (Query Value, Enumerate
                                        Subkeys, Notify, Read Control)
             Sid:              S-1-1-0 (World)
          Ace #3:
             Type:             0x00 (ACCESS_ALLOWED_ACE_TYPE)
             Flags:            0x03 (OBJECT_INHERIT_ACE,
                                     CONTAINER_INHERIT_ACE)
             Size:             0x0014
             Access Mask:      0x000f003f (Full Control)
             Sid:              S-1-5-12 (System)

    The command in the following example displays the security
    descriptor for the HKEY_LOCAL_MACHINE\SOFTWARE key.

    REG> LIST SECURITYDESCRIPTOR HKEY_LOCAL_MACHINE\SOFTWARE

    Security Descriptor:

       Revision:               0x01
       Control:                0x8004 (SE_DACL_PRESENT,
                                       SE_SELF_RELATIVE)
       Owner Sid:              S-1-5-20-220
       Group Sid:              S-1-5-20-220
       Dacl:
          Revision:            0x02
          Size:                0x005c
          Ace Count:           0x0004
          Ace #1:
             Type:             0x00 (ACCESS_ALLOWED_ACE_TYPE)
             Flags:            0x03 (OBJECT_INHERIT_ACE,
                                     CONTAINER_INHERIT_ACE)
             Size:             0x0018
             Access Mask:      0x000f003f (Full Control)
             Sid:              S-1-5-20-220
          Ace #2:
             Type:             0x00 (ACCESS_ALLOWED_ACE_TYPE)
             Flags:            0x03 (OBJECT_INHERIT_ACE,
                                     CONTAINER_INHERIT_ACE)
             Size:             0x0014
             Access Mask:      0x000f003f (Full Control)
             Sid:              S-1-3-0
          Ace #3:
             Type:             0x00 (ACCESS_ALLOWED_ACE_TYPE)
             Flags:            0x03 (OBJECT_INHERIT_ACE,
                                     CONTAINER_INHERIT_ACE)
             Size:             0x0014
             Access Mask:      0x0003001f (Query Value, Set Value,
                                           Create Subkey, Enumerate
                                           Subkeys, Notify, Delete,
                                           Read Control)
             Sid:              S-1-1-0 (World)
          Ace #4:
             Type:             0x00 (ACCESS_ALLOWED_ACE_TYPE)
             Flags:            0x03 (OBJECT_INHERIT_ACE,
                                     CONTAINER_INHERIT_ACE)
             Size:             0x0014
             Access Mask:      0x000f003f (Full Control)
             Sid:              S-1-5-12 (System)