I've found a link to a website where you can find a 139K-Tool to set ACLs on anything (really!)

SetACL.exe: Set Windows NT/2000 permissions (DACLs) on virtually anything
http://www.helge.mynetcologne.de/setacl/

Everyone who write scripts to generate home- and/or profiledirs and shares should take a look at this site!
_________________________
Jens Kalski