A tool with source code by "Andreas Magnusson" available at the "installsite".
Setting user rights on files, folders and registry keys using the LockPermissions table requires the localized name of a user.
Starting with MSI 2.0 you can use "Everyone" and "Administrator" without localization, but other user accounts like "Power User" or "Authenticated User" still need to be localized.
There is a merge module with a custom action that retrieves a multitude of "well-known SIDs" and stores their localized user names in properties (e.g. SID_BUILTIN_POWER_USERS) for use in the LockPermissins table.