Not sure how you're doing the original URL assignment, but when you use netsh to reserve the URL on a machine, you can also specify /user so that permissions are applied properly (which is what that ACL app is doing anyways).