none
The "Create symbolic links" Group Policy setting is not working. RRS feed

  • Question

  • I tried create symlink without admin privilege.

    Added myself user to "Create symbolic links" in gpedit.msc and changed"Selectively Allow The Evaluation Of A SymbolicLink" (Local Link To Local, Local Link To Remote Target, Remote Link To Remote Target, Remote Link To Local Target )

    Then i do logout and login.

    But "mklink target.txt file.txt" return "Access denied".

    Try to create python script:

    import os
    import sys
    import ctypes

    def main():
        kdll = ctypes.windll.LoadLibrary("kernel32.dll")
        res = kdll.CreateSymbolicLinkW('target.txt', 'file.txt', 0)
        if res == 0:
            print(kdll.GetLastError())


    if __name__ == '__main__':
        main()

    But it return 1314 error (ERROR_PRIVILEGE_NOT_HELD)

    What is wrong? :(


    Любой дурак напишет программу, понятную компьютеру. Хорошие разработчики пишут код, который может по

    Tuesday, August 11, 2015 2:44 PM

All replies

  • Hi Sowing,

    Thank you for your question.

    In order to troubleshooting, we could login with administrator privilege to check if the issue persist. We could refer to the symbolic linking by the following link:

    https://technet.microsoft.com/en-us/library/cc754077%28v=ws.10%29.aspx

    If not, we suggest you redirect the thread and script to the following link:

    https://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=itcg 

    If there are any questions regarding this issue, please be free to let me know.

    Best Regard,

    Jim



    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Jim Xu
    TechNet Community Support

    Wednesday, August 12, 2015 7:33 AM
  • I tried create symlink without admin privilege.

    >https://technet.microsoft.com/en-us/library/cc754077%28v=ws.10%29.aspx

    Added myself user to "Create symbolic links" in gpedit.msc

    and changed "Selectively Allow The Evaluation Of A SymbolicLink"

    (Local Link To Local, Local Link To Remote Target,

    Remote Link To Remote Target, Remote Link To Local Target )



    Любой дурак напишет программу, понятную компьютеру. Хорошие разработчики пишут код, который может по


    Wednesday, August 12, 2015 5:39 PM