Actually, container_inherit_ace is indeed a no-op. But OBJECT_INHERIT_ACE on files does mean something: http://msdn.microsoft.com/en-us/library/windows/desktop/aa374924(v=vs.85).aspx