We used SubInACL on NT4 domain controllers that we demoted to member servers and joined to AD. We also used it to clean up ACEs on many member servers.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.