Question : Permissions on sub_folder are incorrectly ordered...

When creating a subfolder in C:\winnt\sysvol\domain\scripts on an machine that has been upgraded from NT4 BDC and promoted to a WIN2K DC, I get the message "The permissions on folder_name are incorrectly
ordered..." when clicking the security tab.

Permissions were not changed with subinacl or any other command line security utility.  The file replication service was finished replicating scripts (per event log message that it was now a domain controller).

This is occuring in a lab environment.  The first NT4 PDC to be upgraded gets no permissions errors, but subsequent BDC's do. We have built a new additional DC from scratch and it also has permissions errors.  

I have read the MS article 322293 that describes this exact problem, and there is a fix, but only for XP.
.

Answer : Permissions on sub_folder are incorrectly ordered...

>"As I understand it, it should be multi-master now and changes can be made at any DC?"

I have heard the same, but based upon my experience have found out the hard way that your better off working from the top if you can.  (That is if you have tested the change your making, cause if you haven't and your replicating a change you could be in a real jamb.)