Create symbolic linksID: oval:gov.nist.usgcb.windowsseven:def:23 | Date: (C)2012-04-13 (M)2023-07-14 |
Class: COMPLIANCE | Family: windows |
This privilege determines if the user can create a symbolic link from the computer he is logged on to.
Default: Administrator
WARNING: This privilege should only be given to trusted users. Symbolic links can expose security vulnerabilities in applications that aren't designed to handle them.
Note
This setting can be used in conjunction a symlink filesystem setting that can be manipulated with the command line utility to control the kinds of symlinks that are allowed on the machine. Type 'fsutil behavior set symlinkevalution /?' at the command line to get more information about fsutil and symbolic links.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create symbolic links
(2) REG: INFO NOT AVAILABLE
Platform: |
Microsoft Windows 7 |