I have been working on a security template to secure a Windows 2008 member server to conform to DISA STIG specifications. I have used subinacl and the Security and Analysis MMC snap-in to create the statements I need to put into a .inf security template file that will be used along with secedit to apply most of the settings to the server. In the [Registry Keys] section, I have a statement like this: "MACHINE\SYSTEM",0,"S:AR(AU;OICIFA;KA;;;WD)". The question I want answered is: After the Machine\System string, there is a number (in the example, it is zero) where I have seen values of 0, 1, and 2. What is this number used for and what do the values represent? I have done hours of Googling and have not been able to find any documentation that explains the actual syntax of the statements in the [Registry Keys] section. Thanks!