CODEWITHSUNDEEP
windows-vistantfssymlinkrights-management
RogerV
RogerV

Reputation: 3866

How do I grant SeCreateSymbolicLink on Windows Vista Home edition

I want to be able to use mklink to create symbolic links on my Windows Vista Home edition computer.

However, I must grant SeCreateSymbolicLink before mklink will be able to function on Vista Home edition (by default the right is revoked).

Home edition provides no UI or tool facility to grant/revoke discreet rights.

A Wikipedia link on NTFS symbolic links says the ntrights.exe tool that comes in Windows Server 2003 Resource Kit Tools can be used to grant this right on Home edition. However, after installing these tools, that proved to be incorrect. That version of ntrights.exe does not recognize SeCreateSymbolicLink and Microsoft's web site does not show any update available for this particular resource kit tool.

Is there a PowerShell script way to do this? Or any other tool/technique that might be feasible to use on Vista Home edition?

Upvotes: 6

Views: 7464

Answers (4)

Radagast the Brown
Radagast the Brown

Reputation: 3346

Based on answer from @sorin, but made visual:

Basically, the permission can be granted to users by an admin user.

Steps:

  1. Win + R and run secpol.msc :

enter image description here

  1. Double-click the perms open the standard dialog to add uses: enter image description here

Have fun :)

Upvotes: 0

theking2
theking2

Reputation: 2783

German language

  • Win+r secpol.msc
  • locate "Sicherheitseinstellungen\Lokale Richtlinien\Zuweisen von Benutzerrechten"
  • Add the user to "Erstellen symbolischer Verknüpfungen"

Dutch language

  • Win+r secpol.msc
  • locate "Beveiligingsinstellingen\Lokaal beleid>Toewijzen van gebruikersrechten"
  • Add the user to "Symbolische koppeling maken"

Upvotes: 1

Shay Erlichmen
Shay Erlichmen

Reputation: 31928

polsedit

alt text
(source: southsoftware.com)
"Polsedit is a freeware utility that allows you to modify user policies such as user account rights and user privileges on a local or remote Windows NT-based system. This can be useful when for some reason you are unable ro run secpol.msc snap-in, for example, XP Home and Vista Home do not have secpol.msc at all. The user interface of Polsedit is very similar to the standard policies editor from Windows, but it also displays some internal data, which can be useful for developers."

Upvotes: 9

sorin
sorin

Reputation: 170310

How about running secpol.msc and granting the Create symbolic links permission to the group or users. By default this permission is granted only to Administrators group.

From the programming side, it looks that you need SE_CREATE_SYMBOLIC_LINK_NAME priviledge or its text variant: SeCreateSymbolicLinkPrivilege. More details in msdn

secpol.msc - Create Symbolick Links permission http://blog.i18n.ro/wp-content/uploads/2010/01/policy_create_symbolic_links.png

Upvotes: 4

Related Questions