Does anybody know if there is a way to "force" the ACL of an AD admin group on all files/dirs in /ifs ? 

i.e. make sure all files/dirs in /ifs have an ACL of an AD admin group?