DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:date
	:message-id:subject:from:to:content-type; q=dns; s=default; b=BX
	+5vJH/Ex4+bayAEfpgTWdsZK81JH1cAqea5FwWRrqVCeDqU1Di2l163nFdrmQwPj
	kjaZSqzAGbysj+5XYCcOHtpho9RKsun1Zbqnp8Kyk9Z2WbBMK5Zgho0PWYPP6bKh
	fy6YPMMoK+nq878FiiuU24vXSNoUXGSJA6TVXHiBg=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
MIME-Version: 1.0
In-Reply-To: <20130529152339.GB4471@calimero.vinschen.de>
References: <CAGHJv4ftSKS6wR-Uzd9Gfvowqpn-WCQ0U01NexgCpZaYqd-Tow@mail.gmail.com>	<20130528185553.GA31309@calimero.vinschen.de>	<CAGHJv4fkvRt1gQfNTarHGUQWvdRxRsy=oAA=pjUQTLQFoNoW-g@mail.gmail.com>	<20130529083910.GD31309@calimero.vinschen.de>	<CAGHJv4cUbx_sMCwUgzTd3ZaXVgbfgPt1Fs7pOO4UtwZhFFj-uA@mail.gmail.com>	<20130529152339.GB4471@calimero.vinschen.de>
Date: Wed, 29 May 2013 12:40:40 -0400
Message-ID: <CAGHJv4cKU_vHa7KddQ5dK_3dkj792A8X5Ps9njS_gBNEFWz63Q@mail.gmail.com>
Subject: Re: Using native symlinks
From: Chris Sutcliffe <ir0nh34d@gmail.com>
To: The Cygwin Mailing List <cygwin@cygwin.com>
Content-Type: text/plain; charset=ISO-8859-1

On 29 May 2013 11:23, Corinna Vinschen wrote:
> On May 29 10:33, Chris Sutcliffe wrote:
>> On 29 May 2013 04:39, Corinna Vinschen wrote:
>> > To workaround that, you can either add yourself to the "Create symbolic
>> > links" right, or you can add the "Users" group if you want to allow
>> > every user to create symlinks.  But this requires changing it on all
>> > machines manually, so alternatively you can create a domain policy which
>> > adds the trusted users to this user right on all machines.
>>
>> I tried this approach and I'm still not having any luck with the user
>> being able to create native symbolic links in a non-elevated shell.
>
> What approach?  Adding the Users group to the Local Security Policy or
> adding a domain policy?  If the latter, did you call gpupdate on the
> client or reboot the client machine to propagate the domain policy?

I've added the specific domain user in the Local Security Policy as I
am not a domain admin (only an admin on the local machine) and as such
cannot propagate a domain policy change.

> Also, either way, did you logoff and logon so that the "Create symbolic
> links" user right can be added to your user token?  Note that your token
> remains unchanged if you didn't exit from your session.  Just changing
> the Policy isn't enough, the OS needs achance to create a new user token
> for you containing the user right.

I've rebooted the machine since making the change and it has had no
affect.  Is there something else I need to do?

Thanks,

Chris

--
Chris Sutcliffe
http://emergedesktop.org
http://www.google.com/profiles/ir0nh34d

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple