rem https://docs.microsoft.com/en-us/windows/win32/secauthz/well-known-sids
set World=*S-1-1-0
set DOMAIN_ALIAS_RID_ADMINS=*S-1-5-32-544
(
@echo [Unicode]
@echo Unicode=yes
@echo [Privilege Rights]
@echo SeCreateSymbolicLinkPrivilege = %World%,flederwiesel,%DOMAIN_ALIAS_RID_ADMINS%
@echo [Version]
@echo signature="$CHICAGO$"
@echo Revision=1
) > %TEMP%\security-policy.inf
secedit.exe /configure /db %windir%\security\local.sdb /cfg %TEMP%\security-policy.inf
secedit.exe /export /cfg %TEMP%\security-policy.inf.bak