I\'m trying to understand how Windows stores permissions in relation to object references, specifically for when IIS (8) application pools are the reference. Are they dynami