After the ActiveDirectorySecurity object is committed to the directory store, it will modify the security descriptor of the object according to the rules set on the ActiveDirectoryAccessRule object.

• 在ActiveDirectorySecurity对象提交给目录存储区后,它将根据ActiveDirectoryAccessRule对象上设置的规则修改该对象的安全说明符。