When creating and setting an ACE for User object, if i set the object_type to "{bf967aba-0de6-11d0-a285-00aa003049e2}", it works properly for "This Object Only" (AccessFlag 0) inheritance type. But if i set the same for "This Object
and all its descendants" (AccessFlag 2), the ACE is created with inheritance type "All User Descendants". If i does not pass the GUID of the domain user ({bf967aba-0de6-11d0-a285-00aa003049e2}), few permissions like "Create ms-net-ieee-80211-Group
Policy Object" are not set.
- Santron Manibharathi.