r24462: - Removing all ACEs was causing removal of the DACL entirely. Win2000 ignored