The security descriptor for this document only contained built-in access control entries. The built-in ACEs have to be removed ...