Is there a reason to use mode here instead of native Windows permissions via the "rights" attribute? The translation from Unix modes to Windows acls is a Chef-specific invention and not immediately obvious to a reviewer of this recipe.