Can’t change permissions – “The parameter is incorrect”

I believe I figured out the problem. It appears to be an issue with the Parent folder's ACL setup.

Lets say you grant "Doman Admins" with the permission "This Folder, Sub Folder, & Files" with full access to the share folder. Whenever a user with the default group of Domain admins creates a new folder, the folder on the unix side gets setup as domain admins. The parent folder also has Everyone full access and propogates down to the child folder. Now you go to the sub folder and want change or remove the Everyone Full access to allow ONLY domain admins access to that folder. What appears to be happening is that it's trying to modify the unix side's acl and trying to reapply the "default:group" acl and its getting rejected at that point.

In order for me to make it stop giving the incorrect paramter error I had to go to the child folder and remove the domain admins which makes it basically reset for that folder. Then I can change any other permssion as needed. Then when I try to reapply full access so that new child folders under this child will propogate I then get the error again.

Hope this makes sense.

I also discovered a security issue. Lets say your parent folder has Everyone full access, but the child folder everyone was read only access. Anyone fitting the everyone category has the ability to rename the folder. I found that they cannot delete the folder which is a good thing, but having the ability to rename a folder imo is bad security.