symbolic link polic group isn't working

Question

My goal is to deploy multiple users to execute mklink related command... I had tried 3 methods but it's still not working.. Any Ideas or feedback would be grateful!

1> I had checked that, even though I'm Adminsitrators group member I couldn't execute mklink command without running cmd with elevated Privilege.
2> After searching I created a new account and put that into create symbolic links member (that user is not a member of administrors group) but that doesn't work either...
The reference I had reviewed for this setting doesn't work for me.
https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/create-symbolic-links
3>Also I set developer mode enable but still mklink doesn't work asking for privilege to run this command

I want to know why and understand the right way to execute this command in a right way. SOS

Answer 1

Hi,

Hopefully, the following will help...

The user must be given the "Create Symbolic Links" privilege or be in a group that has been given that privilege.

If User Account Control (UAC) is on, any user with the "Create Symbolic Links" privilege that is not in the Administrators group can simply create a symbolic link. UAC is normally on.

For users within the Administrators group and with UAC on, the user must "Run as Administrator". For example, right click on your P4V icon (or in the Start menu) and choose "Run as Administrator". For command line clients, you need to start your command console with "Run as Administrator". This is normal behavior for Windows - see the "Access Token Changes" section in the msdn article Windows Vista Application Development Requirements for User Account Control Compatibility.

If UAC is off, any user with the "Create Symbolic Links" privilege can create a symbolic link. An administrator does not have to "Run as Administrator".

This setting is defined by within your Local Security Policies for User Rights Assignment, Security Setting for Create symbolic links. Open Control Panel->Administrative Tools and open Local Security Policy. From there, open Local Policies->User Rights Assignment.

kA0F0000000CqI4KAK_en_US_4_0

By default, the "Administrators" group has this privilege. For users not in the Administrators group, add the user.

To refresh Group Policy settings, including security settings, run
gpupdate /force

User Account Control Setting
Microsoft recommends having UAC on.

This setting is found by Control Panel->User Accounts, then click "Change User Account Control settings". "Never notify" means UAC is off, otherwise it's on.

NTFS Filesystem
Viewing the properties of your drive from Windows Explorer will display your file system type.

---

--If the reply is helpful, please Upvote and Accept as answer--