NTDOC: thx for the links, from what I gather the inheritance order isn't set correctly and can only be properly done with "SetEntriesInAcl" which cannot be used in a Low Level programming language.

kdyer: indeed, I've tried this a year ago, remember I translated your unworking version of ChangeACLs to a working version
ChangeACLS
http://www.kixtart.org/ubbthreads/showflat.php?Cat=0&Number=131714&page=0&fpart=all&vc=1