In particular, Win2K08's ACL editor objects to placing the inheritable entries last, but if you move them to the front of the list, it is happy.
This is invalid. It was something we were doing wrong.
As my alter ego says, this bug is INVALID!