The task: I have a secure virtual folder to which registered extranet users should be able to upload files. For that I programmatically create one subfolder for each user that tries to upload a file. All these users are in a group say "Uploaders", and this group has create and read rights in the secure folder (otherwise I won't be able to create the folder). The problem: Users may not be able to get access to eachothers files. To accomplish that I would like to remove the access rights of the group "Uploaders" from the created user folder and instead add the corresponding user to the ACL. When I try to do that I get a "Cannot modify inherited ACL" error. How can I get pass this?