Access control entries must be created before they can be added to an access control list.

Creating an Access Control Entry (ACE) for the filesystem or the registry and for access or audit purposes uses a set of .NET classes:

• System.Security.AccessControl.FileSystemAccessRule
• System.Security.AccessControl.FileSystemAuditRule
• System.Security.AccessControl.RegistryAccessRule
• System.Security.AccessControl.RegistryAuditRule

There are a number of different ways to use the classes; this section focuses on the most common of those.