The group TrustedInstaller is not called “TrustedInstaller” but

NT SERVICE\Trusted Installer“.

Yes with a slash and space in it.