Re-CAL Files on Domain Controller

We have done our migration of users and clients and the Domain Controller is the file server of the old domain.  I remember reading somewhere (or during the training) that we cannot Re-ACL a Domain Controller.  Either we cannot install the agent, it will not communicate or the Re-ACL will not work.

Is this true?  If so, has anyone run into this and how do you resolve that?

I have even tried to map the shared folder to another server and tried to process it off that server as a shared folder (NAS like).

Is this a supported function?  Is there something I can do, or am I SOL?  Left to either migrate and set permissions manually, or migrate the files to a temp server, re-ACL, and then migrate to the new domain server?

Thank you in advance for any help.