windows - 为什么在 Windows 8 上忽略 SeCreateSymbolicLinkPrivilege？

Question

我想让我的标准用户帐户(即未提升权限)能够调用 CreateSymbolicLink。

但是，在 Win8 上，即使将“Everyone”添加到本地组策略下的 SeCreateSymbolicLinkPrivilege(“创建符号链接(symbolic link)”在 secpol.msc 中)仍然会导致 STATUS_PRIVILEGE_NOT_HELD。为什么？

Answer 1

这确实是 UAC，正如 Christian 所怀疑的那样。

MSDN: Windows Vista Application Development Requirements for User Account Control Compatibility :

What privileges the filtered token contain are based on whether the original token contained any of the restricted RIDS listed above (ed: AKA if you're a non-elevated Admin). If any of the restricted RIDs were in the token, all of the privileges are removed except:

• SeChangeNotifyPrivilege
• SeShutdownPrivilege
• SeUndockPrivilege
• SeReserveProcessorPrivilege
• SeTimeZonePrivilege