I was able to solve the problem adding the group "SAP_LocalAdmin" to D:\usr with permission "Full Control". Also you need in "Advanced Security Settings" to select "Replace all child permissions with inheritable permission entries from this object". Maybe you should try first "D:\usr\sap\ccms"
Andres