I helped a customer who needed to reset the four default ACL's on all 7000 of their users back to the defaults. This perl program creates an LDIF which accomplishes this tasks.

Here are the steps you need to follow:

1. Create input file with all the user DN's
   c:> ldapsearch -h shiloh -b "o=novell" "objectclass=*" dn > users
2. Create the LDIF that adds the default ACL's
   c:> perl acl3.pl users
3. Import the acl.ldif file
   c:> ldapmodify -h shiloh -D "cn=admin,o=novell" -w novell -f acl.ldif
(NOTE: You can find ldapsearch and ldapmodify in sys:Public\mgmt\ConsoleOne\1.2\bin )