How does NTFS keep track of users, groups, and the level of access they have to resources?

Each file, directory, and volume can have its own security when using NTFS. Access control lists (ACLs) for each resource are how NTFS keeps track of security. The user or group name and the level of access they have been given are both recorded in the ACL. Full Control, Modify, Read & Execute, List Folder Contents, Read, and Write are the basic permissions available. Additionally, there are unique settings and permissions that can be used. A token is a software or hardware used in multifactor authentication and is considered something that a user has. RFID or other technology that is read to may be used in badges to allow physical entry to a secure area. Control rosters, which provide a list of those permitted entry, are utilized in areas with security guards.