search for: rwxddpaarwcco

...to the nfs4acl module for interpreting owner@, group@ and everyone at . The ACIs that I needed and that miserably failed me are rather simple (except for a few folders in which I had more complex ones): Domain Admins:rwxdDpaARWc--s:fd---:allow Domain Users:rwxdDpaARWc--s:fd---:allow Administrator:rwxdDpaARWcCos:fd---:allow As you can probably see, I didn''t even need deny ACLs. Obviously, I''ve initially set the ACLs with: chmod -r A=group:Domain\ Admins:rwxdDpaARWc--s:fd---:allow, group:Domain\ Users:rwxdDpaARWc--s:fd---:allow, user:Administrator:rwxdDpaARWcCos:fd---:allow (or something...