Access to Active Directory object permissions through LDAP ?

Hello list.

For some unknown reason (apparently manual modification), some of our 
windows users entries created through LDAP sometime lose inheritance of 
parent object access permission ('inherit permission from parent object' 
check box), making the synchronisation script unable to modify them 
after creation. I was wondering if they were some way to check those 
permission, and eventually modify them, trough LDAP interface.

Also, if someone has any clue why this property misteriously change 
behind my back, I'd be really interested :)
-- 
BOFH excuse #155:

Dumb terminal