(imported comment written by BenKus)
Hey Alfred,
You might want to reference here:
http://forum.bigfix.com/viewtopic.php?pid=3684
or
http://forum.bigfix.com/viewtopic.php?pid=3928
For instance, here is how you would see if “Administrator” had read/write access of the “C:\windows\test1”:
q: (effective read permission for “Administrator” of it, effective write permissions for “Administrator” of it) of dacl of security descriptor of folder “test1” of windows folder
A: True, True