Meaning of ADS_SD_CONTROL_SE_DACL_AUTO_INHERITED   

In a C# application I'm trying to modify an ACL on a folder.
Besides the inherited ACEs I want to add one more ACE. But I'm noticing that 
if I read and write the security descripter, even without modifying it, the 
flag ADS_SD_CONTROL_SE_DACL_AUTO_INHERITED in sd.Control is being reset.

If I write the SD with this code the flag is reset:
IADsSecurityDescriptor sd = securityUtility.GetSecurityDescriptor(strFolder, 
ADS_PATHTYPE_ENUM.ADS_PATH_FILE, ADS_SD_FORMAT_ENUM.ADS_SD_FORMAT_IID) as 
IADsSecurityDescriptor;
securityUtility.SetSecurityDescriptor(strFolder, 
ADS_PATHTYPE_ENUM.ADS_PATH_FILE, sd, ADS_SD_FORMAT_ENUM.ADS_SD_FORMAT_IID);

If the SD is written with other tools, including the GUI, the flag seems to 
be set again.

What does this flag mean and does it matter that it's not set ?
I can't see any change in the GUI whether its set or not.
Can I write the SD in some other way that does not reset this flag ?


Thanks in advance,
Jan Nielsen

date: Mon, 30 May 2005 00:31:13 +0200   author:   Jan Nielsen am