Recently, Microsoft Support released an update for Windows Server 2003 SP2 that allows Chkdsk.exe tool compact the NTFS security descriptor stream (a.k.a. $secure file).
Depending on the file system usage, this descriptor can consume a lot of disk space. After getting to a certain size, no more security settings can be configured in NTFS. Those who attempted to compact this file before know it can be really tricky.
With this update, you can run Chkdsk.exe tool to compact $secure file by using the /f switch.