String value that specifies the group to which the owner's
security ID belongs.
This value can take the following forms:
Domain account (the logon name used in some versions of
Windows® NT) of the form domain\accountname. Domain is the
name of the Windows NT domain that contains the user, and
accountname is the sAMAccountName property of the specified user,
for example: Microsoft\jeffsmit.
Well-known security principal that represents special
identities defined by the Windows NT security system, such as
everyone, local system, principal self, authenticated user, creator
owner, and so on. The objects representing the well-known security
principals are stored in the WellKnown Security Principals
container beneath the Configuration container.
Built-in group that represent the built-in user groups defined
by the Windows NT security system. It has the form
BUILTIN\groupname where groupname is the name of the built-in user
group, for example, BUILTIN\Administrators. The objects
representing the built-in groups are stored in the Builtin
container beneath the domain container.
SID (string format) of the specified user, which is the
objectSID property of the specified user, for example:
S-1-5-32-548. You can convert this to string form by using the
ConvertSidToStringSid function in the Win32 Security
API.