diff --git a/build/win32/code.iss b/build/win32/code.iss
index 0f9f20fc9ba81..e96ca4bde77ef 100644
--- a/build/win32/code.iss
+++ b/build/win32/code.iss
@@ -1491,10 +1491,10 @@ var
   ResultCode: Integer;
   Permissions: string;
 begin
-  Permissions := '/grant:r "*S-1-5-18:F" /grant:r "*S-1-5-32-544:F" /grant:r "*S-1-5-11:RX" /grant:r "*S-1-5-32-545:RX"';
+  Permissions := '/grant:r "*S-1-5-18:(OI)(CI)F" /grant:r "*S-1-5-32-544:(OI)(CI)F" /grant:r "*S-1-5-11:(OI)(CI)RX" /grant:r "*S-1-5-32-545:(OI)(CI)RX"';
 
   #if "user" == InstallTarget
-    Permissions := Permissions + ' /grant:r "*S-1-3-0:F"';
+    Permissions := Permissions + ' /grant:r "*S-1-3-0:(OI)(CI)F"';
   #endif
 
   Exec(ExpandConstant('{sys}\icacls.exe'), ExpandConstant('"{app}" /inheritancelevel:r ') + Permissions, '', SW_HIDE, ewWaitUntilTerminated, ResultCode);