views:

275

answers:

3

I want to be able to use mklink to create symbolic links on my Windows Vista Home edition computer.

However, I must grant SeCreateSymbolicLink before mklink will be able to function on Vista Home edition (by default the right is revoked).

Home edition provides no UI or tool facility to grant/revoke discreet rights.

A Wikipedia link on NTFS symbolic links says the ntrights.exe tool that comes in Windows Server 2003 Resource Kit Tools can be used to grant this right on Home edition. However, after installing these tools, that proved to be incorrect. That version of ntrights.exe does not recognize SeCreateSymbolicLink and Microsoft's web site does not show any update available for this particular resource kit tool.

Is there a PowerShell script way to do this? Or any other tool/technique that might be feasible to use on Vista Home edition?

+1  A: 
Shay Erlichmen
Hmm, a nice, straight forward tool that is better than the typical convoluted admin tool UIs that Microsoft tends to provide.
RogerV
A: 

Thanks! that screenshot did it for me. It shows the actual name of the policy which is SeCreateSymbolicLinkPrivilege and not SeCreateSymbolicLink

+2  A: 

How about running secpol.msc and granting the Create symbolic links permission to the group or users. By default this permission is granted only to Administrators group.

From the programming side, it looks that you need SE_CREATE_SYMBOLIC_LINK_NAME priviledge or its text variant: SeCreateSymbolicLinkPrivilege. More details in msdn

secpol.msc - Create Symbolick Links permission

Sorin Sbarnea
Thank doesn't work for me. Still gives me privilege error. I even added "Everyone", and did a reboot in case the policy wasn't being applied yet, still doesn't work. The only way I have ever gotten mklink to work is by "run as administrator" - which makes it hard to script :(
Matt