anchor.diff:  :: Purpose:       Restores full rights to Administrator and SYSTEM accounts on everything in the Windows system directory
   :: Requirements:  subinacl in the system path or system32 folder
   :: Author:        reddit.com/user/vocatus ( vocatus.gate at gmail ) // PGP key: 0x07d1490f82a211a2
  -::                1.0.3-TRON * Add proper version-specifc commands to secedit database repair. Was incorrectly attempting to run Windows XP command on Windows 7 and up
  +::                1.0.3-TRON * Add proper version-specific commands to secedit database repair. Was incorrectly attempting to run Windows XP command on Windows 7 and up
   ::                           + Add /nostatistic flag to subinacl calls. This should suppress the red banner that appears and always made people think something was wrong
   ::                           + Add standalone execution support
  -::                           - Remove unecessary SETLOCAL command
  +::                           - Remove unnecessary SETLOCAL command
   ::                           - Remove logging of filesystem permissions reset since it only produces a bunch of "access denied" log entries on protected files that we don't care about
   ::                1.0.2-TRON ! Add missing %RAW_LOGS%\ prefix to log compilation line. Thanks to /u/toomasmolder
   ::                1.0.1-TRON ! Add missing pushd statement
  
positive.code: set SCRIPT_VERSION=1.0.3-TRON
  set SCRIPT_UPDATED=2016-09-12
  
  :: Only needed for standalone execution since subinacl.exe is in the same directory as this script
  pushd "%~dp0"
  
  :: Populate dependent variables if we didn't inherit them from Tron (standalone execution)
  if /i "%LOGPATH%"=="" (
  
negative.code: :: EXECUTE ::
  :::::::::::::
  :: Filesystem permissions repair
  subinacl.exe /noverbose /nostatistic /subdirectories %WinDir% /grant=administrators=f >%TEMP%\test.log
  subinacl.exe /noverbose /nostatistic /subdirectories %WinDir% /grant=system=f >NUL
  
  :: Security database repair
  :: Windows XP/2003
  