Default security descriptor for device class

Hi.

I would like to get the default security descriptor that the system
assigns to devices that don’t have an override in the class or device
registry key. Is there a way to achive this, preferable in user mode?

Thanks

Rolf Schäuble