Watch alarm script permissions issue on Windows

Document ID : KB000097323
Last Modified Date : 11/09/2018
Show Technical Document Details
Defining a watch alarm script with a domain account, Spectrum complains "The specified script doesn't have read/execute permissions for the owner of the database".
The Spectrum Install Owner user that runs the Spectrum processes is a domain user. This user belongs in local groups 'Spectrum Users' as well as Administrators. Inspection of the security settings of the script file shows that it should be executable by Spectrum Users or Administrators and the domain user is in both groups anyway.
What is the answer to this permissions issue? 
Windows 2008 R2SP1
Spectrum 10.2.1 + BMP_10.2.101
This looks like a Win2008 OS api  GetEffectiveRightsFromAcl() system call used by Spectrum to check the permissions of the script file.
PTF_10.2.198 was written to leverage the mapped unix permissions for WIN32 and to get the right execution permission.