Patent ID: 8666945

Claim:
A method comprising: performing a backup of a plurality of securable objects; obtaining a security descriptor from a securable object of the plurality of securable objects; identifying at least one security identifier (SID) and an access mask from the security descriptor; creating a database entry in a database table in response to the performing the backup, wherein the database entry identifies an association between the securable object, the at least one SID, and the access mask; obtaining an access token, wherein the access token is created during a login procedure; extracting a first security identifier (SID) from the access token; comparing the first SID with information stored in the database table, wherein the information identifies a user who owns or is permitted to access the plurality of securable objects, each of the plurality of securable objects comprises a respective logical entity, and each respective logical entity comprises at least one of a file, a folder, a file system share, a printer, a registry key, an Active Directory object, or a service; generating a list of securable objects in response to the comparing, wherein each of the securable objects identified in the list of securable objects comprises at least one SID that matches the first SID, and generating the list comprises adding to the list first information based on a first ownership SID, wherein the first information is configured to identify a first securable object, and the first ownership SID was created concurrently with the first securable object, and adding to the list second information based on a first trustee SID, wherein the second information is configured to identify a second securable object, and the first trustee SID was created after the second securable object; and restoring at least one securable object of the list of securable objects in response to receiving a request to restore the at least one securable object.