Windows operating systems provide an object-based security model. That is, a security object can represent any resource in the system: a file, device, process, program, or user.
This allows system administrators to give precise security access to specific objects in the system while allowing them to monitor and record how objects are used.