X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=E3+xN6FHC23eBreR8w0V8Q9ls7mC/mBiw5WzMwezVOKqVgZunCv1g
	KXOThYbN8/KMstFFUWSw8eYQWFC5Uh0IpSGVlx0FN5OGP1J+jymU5iA9YLmgy06m
	l9infQV1ICgzPNDKX16qMWT251jiUWmv1p336FfH13GIuM6hMTzaAU=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=ED8lyiz+ExvpjQwUumKopZyRg4o=; b=Jw/YMDH0fkgKnEVRpwdUqaff0kz6
	hpmGrwkQ4txEvuCcBriNzKLM1+E7Uvjl7FzGcyKdAVO4W+55o10pMEQzA6mf6Nf+
	3PkiONZfqorHrm2k3fWl11YQBp32fLHgavM/6W3WA0hkvpznNbxlrMwSUDXmcVE7
	9IScInpQSQDmexA=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Spam-SWARE-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.1
Date: Wed, 29 May 2013 19:01:47 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Using native symlinks
Message-ID: <20130529170147.GG4471@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <CAGHJv4ftSKS6wR-Uzd9Gfvowqpn-WCQ0U01NexgCpZaYqd-Tow AT mail DOT gmail DOT com> <20130528185553 DOT GA31309 AT calimero DOT vinschen DOT de> <CAGHJv4fkvRt1gQfNTarHGUQWvdRxRsy=oAA=pjUQTLQFoNoW-g AT mail DOT gmail DOT com> <20130529083910 DOT GD31309 AT calimero DOT vinschen DOT de> <CAGHJv4cUbx_sMCwUgzTd3ZaXVgbfgPt1Fs7pOO4UtwZhFFj-uA AT mail DOT gmail DOT com> <20130529152339 DOT GB4471 AT calimero DOT vinschen DOT de> <CAGHJv4cKU_vHa7KddQ5dK_3dkj792A8X5Ps9njS_gBNEFWz63Q AT mail DOT gmail DOT com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <CAGHJv4cKU_vHa7KddQ5dK_3dkj792A8X5Ps9njS_gBNEFWz63Q@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)

On May 29 12:40, Chris Sutcliffe wrote:
> On 29 May 2013 11:23, Corinna Vinschen wrote:
> > On May 29 10:33, Chris Sutcliffe wrote:
> >> On 29 May 2013 04:39, Corinna Vinschen wrote:
> >> > To workaround that, you can either add yourself to the "Create symbolic
> >> > links" right, or you can add the "Users" group if you want to allow
> >> > every user to create symlinks.  But this requires changing it on all
> >> > machines manually, so alternatively you can create a domain policy which
> >> > adds the trusted users to this user right on all machines.
> >>
> >> I tried this approach and I'm still not having any luck with the user
> >> being able to create native symbolic links in a non-elevated shell.
> >
> > What approach?  Adding the Users group to the Local Security Policy or
> > adding a domain policy?  If the latter, did you call gpupdate on the
> > client or reboot the client machine to propagate the domain policy?
> 
> I've added the specific domain user in the Local Security Policy as I
> am not a domain admin (only an admin on the local machine) and as such
> cannot propagate a domain policy change.
> 
> > Also, either way, did you logoff and logon so that the "Create symbolic
> > links" user right can be added to your user token?  Note that your token
> > remains unchanged if you didn't exit from your session.  Just changing
> > the Policy isn't enough, the OS needs achance to create a new user token
> > for you containing the user right.
> 
> I've rebooted the machine since making the change and it has had no
> affect.  Is there something else I need to do?

I don't know.  I have to try (but not today).  Did you try to add the
"Users" group to the Local Security Policy entry instead?


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple