为什么在 Windows 8 上忽略 SeCreateSymbolicLinkPrivilege? [英] Why is SeCreateSymbolicLinkPrivilege ignored on Windows 8?
问题描述
我想让我的标准用户帐户(即未提升)能够调用 CreateSymbolicLink.
I'd like to enable my standard user account (i.e. not elevated) to be able to call CreateSymbolicLink.
但是，在 Win8 上，即使在本地组策略下将Everyone"添加到 SeCreateSymbolicLinkPrivilege(secpol.msc 中的Create Symbolic Links")仍然会导致 STATUS_PRIVILEGE_NOT_HELD.为什么?
However, on Win8, even adding "Everyone" to the SeCreateSymbolicLinkPrivilege ("Create Symbolic Links" in secpol.msc) under local group policy still results in STATUS_PRIVILEGE_NOT_HELD. Why?
推荐答案
确实是 UAC，正如 Christian 所怀疑的那样.
It is indeed UAC, as Christian suspected.
MSDN:用户帐户控制兼容性的 Windows Vista 应用程序开发要求:
过滤后的令牌包含哪些权限取决于原始令牌是否包含上面列出的任何受限 RIDS(如果您是非高级管理员，则称为 AKA).如果令牌中有任何受限制的 RID，则所有权限都将被删除，除了:
What privileges the filtered token contain are based on whether the original token contained any of the restricted RIDS listed above (ed: AKA if you're a non-elevated Admin). If any of the restricted RIDs were in the token, all of the privileges are removed except:
- SeChangeNotifyPrivilege
- SeShutdown 权限
- SeUndock 权限
- SeReserveProcessorPrivilege
- SeTimeZone 权限
这篇关于为什么在 Windows 8 上忽略 SeCreateSymbolicLinkPrivilege?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
