Take following directory:
D:\Directory\Sub\
D: has explicit permissions and are passed to sub directories.
D:\Directory\ has inherited and explicit permissions.
D:\Directory\Sub\ only has inherited permissions.
I'm using robocopy to make an exact copy D:\Directory\ on a new drive, including ACLs and ACEs, with the following syntax:
robocopy "D:\Directory" "G:\Directory" /e /sec /log:logfile
But not a ACL is copied over. I end up with plain "User" and "Administrators" ACLs on the new directory.
This is being done on a file server, and I'm using a domain administrator to perform the action in an elevated command prompt.
It might be worth mentioning that the storage is a SAN (IBM V7000). The D drive is a raw device, the new drive a plain VMDK.