Create Symbolic Links

Information

Create Symbolic Links

This privilege determines if the user can create a symbolic link from the computer he is logged on to.

Default: Administrator

WARNING: This privilege should only be given to trusted users. Symbolic links can expose security vulnerabilities in applications that aren't designed to handle them.

Note
This setting can be used in conjunction a symlink filesystem setting that can be manipulated with the command line utility to control the kinds of symlinks that are allowed on the machine. Type fsutil behavior set symlinkevalution /? at the command line to get more information about fsutil and symbolic links.

Solution

Policy Path: Local Policies\User Rights Assignment
Policy Name: Create Symbolic Links

See Also

https://www.microsoft.com/en-us/download/details.aspx?id=55319

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(7)(b), CSCv6|5.1

Plugin: Windows

Control ID: c9136b7146b62f1e763f6630530b0a6b13723eb69b4133d76829afe57de86829