could you retrieve the $oADsSecurityUtility.SetSecurityDescriptor errornumber ?
I had it a few times in the beginning with AdsSecurity.dll, error was something like -2124324. Which means that the Ace you're trying to add can't be found.