Glossary term
Kernel access-check routine used by drivers and kernel components.
expert
How Windows actually decides allow/deny using tokens, descriptors, and SRM routines.