the second is just a modified version of the firsts older version. And the last one is perfect copy of removeAce version from my last link.

I have not tried the ace reordering part yet, so I guess I can give that a try.

I also checked on MSDN and all specs I found claim this stuff to work on server 2003 or newer.

and last thing, not a single user this far has had these ACEs missing. So adding ACEs shouldn't be needed.

download KiXnet