diff --git a/certbot/compat/filesystem.py b/certbot/compat/filesystem.py
index 1a468fd05..1e69f7f50 100644
--- a/certbot/compat/filesystem.py
+++ b/certbot/compat/filesystem.py
@@ -68,7 +68,7 @@ def _generate_dacl(user_sid, mode):
 
     # If user is already system or admins, any ACE defined here would be superseeded by
     # the full control ACE that will be added after.
-    if str(user_sid) not in [str(system), str(admins)]:
+    if user_sid not in [system, admins]:
         # Handle user rights
         user_flags = _generate_windows_flags(analysis['user'])
         if user_flags: