Try to use Powershell to get modify permission, instead of ICACLS

Based on http://serverfault.com/a/528782/4110
Correctly translate SID into NTAccount

Based on http://iformattable.blogspot.com/2007/12/convert-sid-to-ntaccount-with.html