how to make my fsd support SECURITY_DESCRIPTOR just like NTFS?

when do I create a SECURITY_DESCRIPTOR for a file or folder?
How do I control the SECURITY_DESCRIPTOR ?
Does any one know someting about this?