gh-150368: Change Windows user group to secure identifier

[anytokin]

Simmilar to 897bba7

• Issue: icacls fails in tempfile tests on non-english windows distribution #150368

[python-cla-bot]

All commit authors signed the Contributor License Agreement.

[bedevere-app]

Most changes to Python require a NEWS entry. Add one using the blurb_it web app or the blurb command-line tool.

If this change has little impact on Python users, wait for a maintainer to apply the skip news label instead.

[bedevere-app]

Most changes to Python require a NEWS entry. Add one using the blurb_it web app or the blurb command-line tool.

If this change has little impact on Python users, wait for a maintainer to apply the skip news label instead.

[vstinner]

LGTM. But it would be nice if I could reproduce the issue to check the PR: #150368 (comment).

[vstinner]

Suggested change

	#Use security identifier *S-1-1-0 instead
	# Use security identifier *S-1-1-0 instead

[vstinner]

Lib/test/test_ntpath.py and Lib/test/test_os/test_os.py already call icacls.exe with identifiers instead of names:

Lib/test/test_ntpath.py:            ['icacls.exe', test_file, '/deny', '*S-1-5-32-545:(S)'],
Lib/test/test_os/test_os.py:            ['icacls.exe', fname, '/deny', '*S-1-5-32-545:(S)'],

[zooba]

LGTM with Victor's proposed comment fix.

Not totally sure how far this should be backported, but easy enough to let the bot try and fail.