diff --git a/internal/fs/file.go b/internal/fs/file.go
index 929195f1c..85b202dc8 100644
--- a/internal/fs/file.go
+++ b/internal/fs/file.go
@@ -134,7 +134,7 @@ func IsAccessDenied(err error) bool {
 // ResetPermissions resets the permissions of the file at the specified path
 func ResetPermissions(path string) error {
 	// Set the default file permissions
-	if err := os.Chmod(path, 0600); err != nil {
+	if err := os.Chmod(fixpath(path), 0600); err != nil {
 		return err
 	}
 	return nil
diff --git a/internal/fs/file_windows.go b/internal/fs/file_windows.go
index b05068c42..50c7e9938 100644
--- a/internal/fs/file_windows.go
+++ b/internal/fs/file_windows.go
@@ -85,7 +85,7 @@ func ClearSystem(path string) error {
 
 // ClearAttribute removes the specified attribute from the file.
 func ClearAttribute(path string, attribute uint32) error {
-	ptr, err := windows.UTF16PtrFromString(path)
+	ptr, err := windows.UTF16PtrFromString(fixpath(path))
 	if err != nil {
 		return err
 	}
diff --git a/internal/fs/sd_windows.go b/internal/fs/sd_windows.go
index 5d98b4ef4..2da1c5df4 100644
--- a/internal/fs/sd_windows.go
+++ b/internal/fs/sd_windows.go
@@ -129,22 +129,22 @@ func SetSecurityDescriptor(filePath string, securityDescriptor *[]byte) error {
 
 // getNamedSecurityInfoHigh gets the higher level SecurityDescriptor which requires admin permissions.
 func getNamedSecurityInfoHigh(filePath string) (*windows.SECURITY_DESCRIPTOR, error) {
-	return windows.GetNamedSecurityInfo(filePath, windows.SE_FILE_OBJECT, highSecurityFlags)
+	return windows.GetNamedSecurityInfo(fixpath(filePath), windows.SE_FILE_OBJECT, highSecurityFlags)
 }
 
 // getNamedSecurityInfoLow gets the lower level SecurityDescriptor which requires no admin permissions.
 func getNamedSecurityInfoLow(filePath string) (*windows.SECURITY_DESCRIPTOR, error) {
-	return windows.GetNamedSecurityInfo(filePath, windows.SE_FILE_OBJECT, lowBackupSecurityFlags)
+	return windows.GetNamedSecurityInfo(fixpath(filePath), windows.SE_FILE_OBJECT, lowBackupSecurityFlags)
 }
 
 // setNamedSecurityInfoHigh sets the higher level SecurityDescriptor which requires admin permissions.
 func setNamedSecurityInfoHigh(filePath string, owner *windows.SID, group *windows.SID, dacl *windows.ACL, sacl *windows.ACL) error {
-	return windows.SetNamedSecurityInfo(filePath, windows.SE_FILE_OBJECT, highSecurityFlags, owner, group, dacl, sacl)
+	return windows.SetNamedSecurityInfo(fixpath(filePath), windows.SE_FILE_OBJECT, highSecurityFlags, owner, group, dacl, sacl)
 }
 
 // setNamedSecurityInfoLow sets the lower level SecurityDescriptor which requires no admin permissions.
 func setNamedSecurityInfoLow(filePath string, dacl *windows.ACL) error {
-	return windows.SetNamedSecurityInfo(filePath, windows.SE_FILE_OBJECT, lowRestoreSecurityFlags, nil, nil, dacl, nil)
+	return windows.SetNamedSecurityInfo(fixpath(filePath), windows.SE_FILE_OBJECT, lowRestoreSecurityFlags, nil, nil, dacl, nil)
 }
 
 // enableBackupPrivilege enables privilege for backing up security descriptors