You can use dsacls with /T switch to restore the ACL back to default.
C:\dsacls /?Displays or modifies permissions (ACLS) of an Active Directory (AD)Object
DSACLS object [/I:TSP] [/N] [/P:YN] [/G group/user:perms [...]] [/R group/user [...]] [/D group/user:perms [...]] [/S] [/T] [/A]
/T Restore
Because of something called FERPA (Federal Student Privacy Act) I had
written a script that goes through our Students OU and removes the ACE for
Authenticated Users. This prevented the students private information from
being viewable by non-admin staff.
Now I have been given a better view for
