diff --git a/src/tools/xattr.rs b/src/tools/xattr.rs
index 6b712d14..500af326 100644
--- a/src/tools/xattr.rs
+++ b/src/tools/xattr.rs
@@ -170,6 +170,10 @@ pub fn is_valid_xattr_name(c_name: &CStr) -> bool {
     if name.starts_with(b"user.") || name.starts_with(b"trusted.") {
         return true;
     }
+    // samba saves windows ACLs there
+    if name == b"security.NTACL" {
+        return true;
+    }
     is_security_capability(c_name)
 }