Setting a directory's ACL on a windows domain controller using the active_directory module and the fileacl.exe program.[1]