Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

expanding readme for pain points: enabling symbolic links on Windows without dev mode #360

Open
doctorpangloss opened this issue Aug 30, 2023 · 0 comments

Comments

@doctorpangloss
Copy link

this snippet of powershell correctly enables the current user to create symlinks (ln -s)

$exportPath = "$env:TEMP\secpol.cfg"
$importPath = "$env:TEMP\secpol_modified.cfg"
$dbPath = "$env:TEMP\secpol.sdb"
secedit /export /cfg "$exportPath"
(Get-Content $exportPath) -replace '^SeCreateSymbolicLinkPrivilege.*$', ("SeCreateSymbolicLinkPrivilege = *S-1-5-32-544,*" + [System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value) | Set-Content $importPath
secedit /import /db "$dbPath" /cfg "$importPath" /overwrite
Remove-Item $exportPath
Remove-Item $importPath
Remove-Item $dbPath

there isn't a specific Linux set of actions that correspond to this, because why would you prevent users from creating symlinks? but it's a routine pain point. windows users have to enable dev mode, even on Windows Server, for non-administrators to have symlinking privileges. this is a headless solution.

would you be interested in docs / wiki related to this?

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant