\SystemRoot is correct (it’s a symbolic link for kernel-mode, no %–% is required here as % is known only for user-mode),