I know, but it is exactly that I want the existing subfolder to inherit the new ace that I apply to the root folder (not just newly created subfolder. This can be done by setting SE_DACL_AUTO_INHERIT flag on de Security Descriptor.