I've found a link to a website where you can find a 139K-Tool to set ACLs on anything (really!)
<span style="font-weight: bold">SetACL.exe: Set Windows NT/2000 permissions (DACLs) on virtually anything</span>
http://www.helge.mynetcologne.de/setacl/
Everyone who write scripts to generate home- and/or profiledirs and shares should take a look at this site!
[This message has been edited by Jens Kalski (edited 06-03-2002).]