X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=t1EKLV2QMQ0sKBo3g5vjLSvSQ7kfq0oZf8HyQJiK8nDwgV1ZjfJeU
	B0S35ccA5r07eTTkHxmFar5lkboCmQn5Is9hHPYe3ynU0rUgiWrHwSU2JSJu4cpq
	H08FvfIOqjfxDz9n3A0UxleGGo65K95Fz9LCC4HUYMHjjF5syUQxic=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=cqvMu/AGCMePQC+MPHhNhRpnIXg=; b=U7RMwA7xKx1ASeQSsorXwUVWO6bu
	bILR9KZmxwADB3XE0FMWXzXkXMcaNxq+sdfw7fUoJOG6poMB4aHE/CljxqMevXTn
	2Y6SQzg+gBF88YRBDTu6uu0BYyOO4Og7Rusp3qfqr3DQQDqz5bfS8ajoulU9B4wk
	XMTAER4/YcAccXQ=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-101.6 required=5.0 tests=AWL,BAYES_00,GOOD_FROM_CORINNA_CYGWIN,KAM_NUMSUBJECT,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.1 spammy=nativestrict, winsymlinks, symlinks, Administrators
X-HELO: mout.kundenserver.de
Date: Tue, 19 Mar 2019 17:57:50 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: winsymlinks:nativestrict and Windows 10
Message-ID: <20190319165750.GP3908@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <1039329494 DOT 20190319152358 AT yandex DOT ru> <f4207a77-a8d4-6004-dd76-2bc789e8d34f AT gmail DOT com> <e564b698-4347-56fb-6d36-5e305df3c361 AT razorcat DOT de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="ytoMbUMiTKPMT3hY"
Content-Disposition: inline
In-Reply-To: <e564b698-4347-56fb-6d36-5e305df3c361@razorcat.de>
User-Agent: Mutt/1.11.3 (2019-02-01)

--ytoMbUMiTKPMT3hY
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mar 19 16:16, Frank Redeker wrote:
> Am 19.03.2019 um 15:23 schrieb LRN:
> > ... SNIP ...
> >=20
> > Devmode + SYMBOLIC_LINK_FLAG_ALLOW_UNPRIVILEGED_CREATE is the only way =
to
> > create symlinks without being Administrator (that i know of). You can't=
 just
> > give some extra privileges to your non-administrator account. I know, i=
've tried.
>=20
> On Windows 10 Pro (1809) this works for me for with a non-administrator
> account.
>=20
> I just added the SeCreateSymbolicLinkPrivilege to my normal user account
> and was able to use mklink without any problems.

This is indeed a solution since the permission to create native symlinks
is coupled to this privilege and the Administrators group is the only
one having this privilege by default.  Unfortunately not everyone has
the luxury to enable this privilege for the own account (domain users).

Btw, there is another restriction with native symlinks, independent from
user privileges,  which is pretty puzzeling at first:

https://blogs.msdn.microsoft.com/junfeng/2012/05/07/the-symbolic-link-canno=
t-be-followed-because-its-type-is-disabled/


Corinna

--=20
Corinna Vinschen
Cygwin Maintainer

--ytoMbUMiTKPMT3hY
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEoVYPmneWZnwT6kwF9TYGna5ET6AFAlyRH44ACgkQ9TYGna5E
T6BOJRAAlF0ybIA4hq5Vz682jvaEa2ozRUhqCAukUeMt2XEjOOhjmVMmSbB4rDj1
QDSgUXiD7fZXtRpqHIoeNx3/kKQeJLDX6LbJJq0si/k1wdaPNaK3lJN7+RWfrQGD
hgbnE4IfNqaamRMVyXHVQErBA62IUTuI31XaYnKgyBcBwsy99ETo7sWfzrKJUaBn
92QR/KTUpUmdBM2+5/s1aSYY77bcHXLBsK3U/03XEZ9Cxk6FkRLNFy2+LLnB5aDB
xIBk9AwGEoOPSOenhlNUxdaGmjG3zx9P9gu3fz91+4eO3pfhPaZ0zyCEm3A3HHOy
2rrkWCHBVTKAQE1BaVTrrywJ/AqCb1ch9Ez1i60G5/XDp4fc6MrXR9rakOZrciqt
slrzhV0U9YoLh34nYUcUxCP20vcPjvIqnGNBkAs6OUXB+Aw5wHsjJ9UGoQ1fg4Wy
VWyOdGSzB9bvzbbGYLCXmY6pYeDpTRplKjch5zTW+dTYL6Mx+v9W23G6LWwSt0Mz
RVVsG47z9CNJOP/O7WWk9IvnsRR4bTeQSZGdQ64ni6GprQ21VyvP69uT0mSVwjlZ
Fhq7sn+1/hdiqxyhRnkT8r7poepoIDgDZkoXWa3/d1M1f3H45r2hv6qJbS4i5Uqm
zcZA8vSDIQkH2jxmusydu0kH7TWE6f4ksK1UfeyVWKW7YIb/PKU=
=8n/6
-----END PGP SIGNATURE-----

--ytoMbUMiTKPMT3hY--