Either Security Descriptor is not associated with the link or DACL in Security Descriptor is NULL. So cannot revoke permissions. ...