HP CIFS Server 3.0d Administrator's Guide version A.02.02 (Edition 5)

Managing HP-UX File Access Permissions from Windows NT/XP/2000
HP CIFS Server Directory ACLs and Windows 2000/XP Clients
Chapter 3 67
If you modify an ACE entry and clear both Allow and Deny check boxes,
the Windows 2000 or XP client removes that ACE and does not send it to
the HP CIFS Server.
To prevent a directory owner from losing access, both access and default
ACEs for the owner should be set to Full Control permissions.
Removing an ACE entry from Windows 2000/XP clients
For mandatory ACLs (user, owning group, everyone), removing an ACE
entry from the Advanced Windows permission screen does not remove
that ACE entry on the UNIX system. The HP CIFS Server generates the
missing ACEs from the existing access ACEs on the file.
For any other user or group ACEs, removing an ACE entry from the
Advanced Windows screen will remove that ACE entry on the HP CIFS
Server.
Examples
Following are three examples to show the changes of the directory ACEs
on the HP CIFS Server when an ACE entry is removed from the
Windows 2000/XP client.
Example 1:
In the example 1, assume that the existing directory ACEs for testdir
on the HP CIFS Server are:
# file:testdir
# owner:testuser
# owning group:users
access:owner:rwx
access:owning group:rwx
access:other:rwx
default:owner:rwx
default:owning group:r-x
default:other:r-x