<div class="content"><p align="right"><a href="https://msdn.microsoft.com/en-us/library/c6ce4275-3d90-4890-ab3a-514745e4637e" data-linktype="external">msdn link</a></p><p>The SID_IDENTIFIER_AUTHORITY structure represents the
top-level authority of a security identifier (SID).</p><table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td colspan="32">
  <p>Value</p>
  </td>
 </tr>
 <tr>
  <td colspan="16">
  <p>...</p>
  </td>
  
 </tr>
</tbody></table><p><b>Value (6 bytes): </b>An array of six 8-bit
unsigned integers that specify the top-level authority of a <a href="78eb9013-1c3a-4970-ad1f-2b1dad588a25" data-linktype="relative-path">SID</a>, <a href="5cb97814-a1c2-4215-b7dc-76d1f4bfad01" data-linktype="relative-path">RPC_SID</a>, and <a href="../ms-lsat/f04a771b-c018-4098-81b5-2a819f9b5db8" data-linktype="relative-path">LSAPR_SID_INFORMATION</a>.</p><dl>
<dd>
<p>The identifier authority value identifies the domain
security authority that issued the SID. The following identifier authorities
are predefined for wire traffic.</p>
</dd>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Identifier Authority</p>
   </th>
   <th>
   <p>Meaning</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>
  <p>NULL_SID_AUTHORITY</p>
  <p>{0x00, 0x00, 0x00, 0x00, 0x00, 0x00}</p>
  </td>
  <td>
  <p>Specifies the <b>NULL</b> SID authority. It defines
  only the <b>NULL</b> well-known-SID: S-1-0-0. </p>
  </td>
 </tr><tr>
  <td>
  <p>WORLD_SID_AUTHORITY</p>
  <p>{0x00, 0x00, 0x00, 0x00, 0x00, 0x01}</p>
  </td>
  <td>
  <p>Specifies the World SID authority. It only defines the
  <b>Everyone</b> well-known-SID: S-1-1-0.</p>
  </td>
 </tr><tr>
  <td>
  <p>LOCAL_SID_AUTHORITY </p>
  <p>{0x00, 0x00, 0x00, 0x00, 0x00, 0x02}</p>
  </td>
  <td>
  <p>Specifies the Local SID authority. It defines only the
  <b>Local</b> well-known-SID: S-1-2-0.</p>
  </td>
 </tr><tr>
  <td>
  <p>CREATOR_SID_AUTHORITY</p>
  <p>{0x00, 0x00, 0x00, 0x00, 0x00, 0x03}</p>
  </td>
  <td>
  <p>Specifies the Creator SID authority. It defines the <b>Creator
  Owner</b>, <b>Creator Group</b>, and <b>Creator Owner Server</b>
  well-known-SIDs: S-1-3-0, S-1-3-1, and S-1-3-2. These SIDs are used as
  placeholders in an access control list (ACL) and are replaced by the user,
  group, and machine SIDs of the security principal.</p>
  </td>
 </tr><tr>
  <td>
  <p>NON_UNIQUE_AUTHORITY</p>
  <p>{0x00, 0x00, 0x00, 0x00, 0x00, 0x04}</p>
  </td>
  <td>
  <p>Not used.</p>
  </td>
 </tr><tr>
  <td>
  <p>SECURITY_NT_AUTHORITY</p>
  <p>{0x00, 0x00, 0x00, 0x00, 0x00, 0x05}</p>
  </td>
  <td>
  <p>Specifies the Windows NT operating system security
  subsystem SID authority. It defines all other SIDs in the forest.</p>
  </td>
 </tr><tr>
  <td>
  <p>SECURITY_APP_PACKAGE_AUTHORITY</p>
  <p>{0x00, 0x00, 0x00, 0x00, 0x00, 0x0F}</p>
  </td>
  <td>
  <p>Specifies the application package authority. It
  defines application capability SIDs. </p>
  </td>
 </tr><tr>
  <td>
  <p>SECURITY_MANDATORY_LABEL_AUTHORITY</p>
  <p>{0x00, 0x00, 0x00, 0x00, 0x00, 0x10}</p>
  </td>
  <td>
  <p>Specifies the Mandatory label authority. It defines
  the integrity level SIDs.</p>
  </td>
 </tr><tr>
  <td>
  <p>SECURITY_SCOPED_POLICY_ID_AUTHORITY</p>
  <p>{0x00, 0x00, 0x00, 0x00, 0x00, 0x11}</p>
  </td>
  <td>
  <p>Specifies the Scoped Policy Authority. It defines all
  other scoped policy SIDs in the forest.<a id="Appendix_A_Target_5"></a><a aria-label="Product behavior note 5" href="11e1608c-6169-4fbc-9c33-373fc9b224f4#Appendix_A_5" data-linktype="relative-path">&lt;5&gt;</a></p>
  </td>
 </tr><tr>
  <td>
  <p>SECURITY_AUTHENTICATION_AUTHORITY</p>
  <p>{0x00, 0x00, 0x00, 0x00, 0x00, 0x12}</p>
  </td>
  <td>
  <p>Specifies the authentication authority asserting the client’s
  identity. It defines only the following well-known SIDs: S-1-18-1, and
  S-1-18-2.<a id="Appendix_A_Target_6"></a><a aria-label="Product behavior note 6" href="11e1608c-6169-4fbc-9c33-373fc9b224f4#Appendix_A_6" data-linktype="relative-path">&lt;6&gt;</a></p>
  </td>
 </tr></tbody></table>
</dd></dl><p> </p></div>