I looked at how Sysinternals DebugView does that. It does the following:

ConvertStringSecurityDescriptorToSecurityDescriptorA(
  "D:(A;;GRGWGX;;;WD)(A;;GA;;;SY)(A;;GA;;;BA)(A;;GRGWGX;;;AN)(A;;GRGWGX;;;RC)(A;;GRGWGX;;;S-1-15-2-1)S:(ML;;NW;;;LW)",
  SDDL_REVISION_1,
  ...
)

Since DebugView is the de facto standard tool for debug logging, you might want to align DebugView++ to use the exact same security descriptor.

Thank you!! That is very interesting, is there any more you can tell me about what this does, and what it is doing? I am not familiar with this at all.

Here are a couple of references:

• https://scorpiosoftware.net/2019/01/15/fun-with-appcontainers/
• https://devblogs.microsoft.com/oldnewthing/20220502-00/?p=106550

A process within an AppContainer runs with an Integrity Level of low, which effectively means it has no access to almost everything, as the default integrity level of objects (such as files) is Medium.

My change, and DebugView's method (S-1-15-2-1 representing "All Application Packages") set permissions such that the relevant objects are accessible to AppContainer processes.