3.5.4 Checks for Read Authorization
If the DHCP Users SID from the DHCPUsersSid ADM element or the DHCP Administrators SID from the DHCPAdministratorsSid ADM element is found within the ClientIdentitySids[] ADM element array, then read access is granted. If a match is not found, access is denied and ERROR_ACCESS_DENIED is returned.