diff --git a/dlls/advapi32/tests/security.c b/dlls/advapi32/tests/security.c
index 62463a71eb5..3332d7b306e 100644
--- a/dlls/advapi32/tests/security.c
+++ b/dlls/advapi32/tests/security.c
@@ -2300,14 +2300,12 @@ static void test_acls(void)
     ok(ret, "InitializeAcl(ACL_REVISION3) failed with error %d\n", GetLastError());
 
     ret = IsValidAcl(pAcl);
-    todo_wine
     ok(ret, "IsValidAcl failed with error %d\n", GetLastError());
 
     ret = InitializeAcl(pAcl, sizeof(buffer), ACL_REVISION4);
     ok(ret, "InitializeAcl(ACL_REVISION4) failed with error %d\n", GetLastError());
 
     ret = IsValidAcl(pAcl);
-    todo_wine
     ok(ret, "IsValidAcl failed with error %d\n", GetLastError());
 
     SetLastError(0xdeadbeef);
diff --git a/dlls/ntdll/sec.c b/dlls/ntdll/sec.c
index f195678a24e..a1c839dca2b 100644
--- a/dlls/ntdll/sec.c
+++ b/dlls/ntdll/sec.c
@@ -1278,7 +1278,8 @@ BOOLEAN WINAPI RtlValidAcl(PACL pAcl)
 		PACE_HEADER	ace;
 		int		i;
 
-                if (pAcl->AclRevision != ACL_REVISION)
+                if (pAcl->AclRevision < MIN_ACL_REVISION ||
+                    pAcl->AclRevision > MAX_ACL_REVISION)
                     ret = FALSE;
                 else
                 {