i noticed that in the SDK in the examples of the acl editing there is a setinfo statement on the object you are changing the acl of.
right at the end after the setsecuritydescriptor statement.
i am still writing other code and have not had the chance to test anything but reading the script i noticed it was missing this statement...

hope it helps...

regards,
MvdW

[ 21 August 2001: Message edited by: mvdw ]