Executable File ADs

With every executable file two sets of AD Groups can be associated:

• Read Only AD Groups, and
• Read Write AD Groups.

Elements of which form Read Only and Read Write ADs of a process respectively, as specified in Subsection 4.3.1. Executable File ADs represent minimal portions of a file system that the running image of the executable needs to be able to access for its correct operation.

The AD Group 0 (Subsection 4.3.4) is forced into the executable files Read Write AD, as the default AD group.