String value that specifies the FPCAccessControlEntry
This value can take the following forms:
Domain account (the logon name used in some versions of
Windows NT®) of the form domain\accountname.
Domain is the name of the Windows NT domain that contains
the user, and accountname is the sAMAccountName property of
the specified user, for example: Microsoft\jeffsmit.
Well-known security principal that represents special
identities defined by the Windows NT security system, such as
everyone, local system, principal self, authenticated user, creator
owner, and so on. The objects representing the well-known security
principals are stored in the WellKnown Security Principals
container under the Configuration container.
Built-in group that represents the built-in user groups defined
by the Windows NT security system. It has the form
BUILTIN\groupname where groupname is the name of the
built-in user group, for example, BUILTIN\Administrators. The
objects representing the built-in groups are stored in the Builtin
container beneath the domain container.
SID (string format) of the specified user, which is the
objectSID property of the specified user, for example:
S-1-5-32-548. You can convert this to string form using the
ConvertSidToStringSid function in the Win32 Security