Access control entries must be created before they can be added to an access control list.

Creating an access control entry (ACE) for the filesystem or the registry, and for access or audit purposes, uses a set of .NET classes:

• System.Security.AccessControl.FileSystemAccessRule
• System.Security.AccessControl.FileSystemAuditRule
• System.Security.AccessControl.RegistryAccessRule
• System.Security.AccessControl.RegistryAuditRule

There are a number of different ways to use these classes; this section focuses on the most common.