We switched a test qtree from Unix to NTFS style and discovered that no one (not even a Windows user with admin privs in the domain) has "modify" or "full control" rights on any file or folder that already exists. So it looks like we can't change the ACLs on anything that already exists. If a Windows user creates a new folder or file, then he has the ability to change the ACL.
Ooops. Looks like I was wrong here. The owner of the file or folder does have full control. So I guess I can chown everything to me and then from my Windows account I can set all the ACLs. I'll check and see if the local filer "administrator" user can do it.
Steve Losen scl@virginia.edu phone: 434-924-0640
University of Virginia ITC Unix Support