Reacl Errors "Error,FolderUpdater,Unable to update item security for 'C:\ProgramData\Sentinel': CreateFile: Access is denied" (4328740)

Reacl Errors "Error,FolderUpdater,Unable to update item security for 'C:\ProgramData\Sentinel': CreateFile: Access is denied"

We receive the following error when we attempt a ReACL "Error,FolderUpdater,Unable to update item security for 'C:\ProgramData\Sentinel': CreateFile: Access is denied"

How do we fix and avoid these errors?

Antivirus application has locked this folder from use, or user does not have permissions to access the folder

The following link to online help explains the process, and lists the default folders excluded from ReACL

ODM AD: https://support.quest.com/technical-documents/on-demand-migration/current/active-directory-user-guide/12#TOPIC-1601748

P365 AD: https://support.quest.com/technical-documents/binary-tree-power365/current/help-center/21#TOPIC-1564840

ADPro: https://support.quest.com/technical-documents/binary-tree-migrator-pro-for-active-directory/20.10/user-guide/6#TOPIC-1565500

ODM AD and P365 AD

RESOLUTION 1

Follow these steps to add a folder to exclusion list

From the Active Directory Dashboard, click hamburger menu on left side of screen
Click "Profiles"
Click "Device ReACL Profiles"
Select and open the Profile
Click through the wizard, clicking Next
The screen will display a section called "Exclude These Paths from Processing"
add this folder to be excluded

RESOLUTION 2

To prevent these types of errors from failing the ReACL, perform the following steps:
From the Active Directory Dashboard, click hamburger menu on left side of screen
Click "Profiles"
Click "Device ReACL Profiles"
Click "Device ReACL Profiles"
Select and open the Profile
Click through the wizard, clicking Next
Change the  'Elevated Permissions Failure Action' from "Terminate processing with fatal error" to "Log Warning".
This should prevent the device from failing, and log these folders with warnings

ADPro

RESOLUTION 1

Follow these steps to add a folder to exclusion list

From the ADPro Dashboard, go to "Manage" on right side of screen
Click the "ADPro Profiles"
Click "Device ReACL Profiles"
Select and open the Profile
Click through the wizard, clicking Next
The screen will display a section called "Exclude These Paths from Processing"
add this folder to be excluded

RESOLUTION 2

To prevent these types of errors from failing the ReACL, perform the following steps:
From the ADPro Dashboard, go to "Manage" on right side of screen
Click the "ADPro Profiles"
Click "Device ReACL Profiles"
Select and open the Profile
Click through the wizard, clicking Next
Change the  'Elevated Permissions Failure Action' from "Terminate processing with fatal error" to "Log Warning".
This should prevent the device from failing, and log these folders with warnings