Virtualization

Hello,
We have been asked to set permissions to a folder under AppVRootPackage folder via setACL. Now i have an understanding this can be done via dynamicdeploymentconfig xml file under the machine scripts section. however, what i fails to understand is. what should i mention in the path and arguments section , so that during publishing setacl.exe sets permissions to folders under AppVRootPackage folder. Following is a snippet of our code
<MachineScripts>

      <AddPackage>
        <Path>[{AppVPackageRoot}]\..\SetACL.exe</Path>
        <Arguments>-on "[{AppVPackageRoot}]" -ot file -actn ace -ace "n:Everyone;p:Full"</Arguments>
      </AddPackage>

    </MachineScripts>

But for some reason the above logic isnt working. Any of you who can help me figure out what am i missing in code??