Because of something called FERPA (Federal Student Privacy Act) I had
written a script that goes through our Students OU and removes the ACE for
Authenticated Users. This prevented the students private information from
being viewable by non-admin staff.
Now I have been given a better view for our
You can use dsacls with /T switch to restore the ACL back to default.
C:\dsacls /?Displays or modifies permissions (ACLS) of an Active Directory (AD)Object
DSACLS object [/I:TSP] [/N] [/P:YN] [/G : [...]] [/R [...]] [/D : [...]] [/S] [/T] [/A]
/T Restore
