11.1.2.3 For a Specific Group in a Domain

To change the default ACL for a specific group, edit the group LDAP entry. Change the value of the icsDefaultacl attribute.