> > However the acls via getfacl for the two GPO's are identical. Your sure? > I don't know if that will be problematic down the road or not. No, thats fine. But run on the 2 folders : samba-tool ntacl get --as-sddl FOLDERHERE Compair the 2 outputs. There must be a difference. Well, at least it works now for you.. Greetz, Louis