An object in Active Directory of Microsoft Windows 2000 that can be assigned permissions and rights.
Three types of security principals are used in Windows 2000 networks:
Security principals are uniquely identified by security identifiers (SIDs), which provide a unique, internal, alphanumeric identifier for the security principal.