I've confirmed that these commands fix the issue:
P:\>icacls "System Volume Information" /remove SYSTEM
P:\>icacls "System Volume Information" /grant:r SYSTEM:(OI)(CI)F
However, the commands must be executed from a command prompt running under SYSTEM (psexec -s -i cmd)