Windows: ignore SYNCHRONIZE privilege in cm_CheckNTOpen