https://bugs.winehq.org/show_bug.cgi?id=41934
--- Comment #7 from Dmitry Timoshkov dmitry@baikal.ru --- (In reply to Sagawa from comment #6)
The patch looks good to me.
I found out source code of the installer [1]. It seems that the installer doesn't support Windows 7 in per-machine install mode then. So, it's reasonable to add "AC" to known SID string to work correctly.
BTW, I misunderstood Security Descriptor (in ConvertStringSecurityDescriptorToSecurityDescriptorW) and Security Attributes (in CreateDirectoryW) in the previous comment. So, original code makes sense at that point.
[1] https://github.com/Squirrel/Squirrel.Windows/blob/ caef279489755bd7024aa3e250de1f1120f6c993/src/Setup/MachineInstaller.cpp
Thanks for the confirmation. Regarding the patch - I'm not sure whether an existing WinBuiltinAnyPackageSid should be converted to the "AC" alias, or (like my patch does) new WinApplicationPackageAuthoritySid entry should be added to the well-known sid list.