Knowledge Base
Authentication is disabled (development mode).

Allow creation of NTFS symlinks on Windows

Edit

allow create ntfs secpol security symlink windows

rem https://docs.microsoft.com/en-us/windows/win32/secauthz/well-known-sids

set World=*S-1-1-0
set DOMAIN_ALIAS_RID_ADMINS=*S-1-5-32-544

(
    @echo [Unicode]
    @echo Unicode=yes
    @echo [Privilege Rights]
    @echo SeCreateSymbolicLinkPrivilege = %World%,flederwiesel,%DOMAIN_ALIAS_RID_ADMINS%
    @echo [Version]
    @echo signature="$CHICAGO$"
    @echo Revision=1
) > %TEMP%\security-policy.inf

secedit.exe /configure /db %windir%\security\local.sdb /cfg %TEMP%\security-policy.inf
secedit.exe /export /cfg %TEMP%\security-policy.inf.bak