To change the default ACL for a specific group, edit the group LDAP entry. Change the value of the icsDefaultacl attribute.