Search notes:

Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapabilityClasses

AllCachedCapabilities

The values of AllCachedCapabilities represent the capabilty SIDs that the System is aware of. They all start with S-1-15-3-….

Index