我想启用我的标准用户帐户(即未升级)以便能够调用CreateSymbolicLink。
但是,在Win8上,即使将“Everyone”添加到本地组策略下的SeCreateSymbolicLinkPrivilege(secpol.msc中的“创建符号链接”),仍会产生STATUS_PRIVILEGE_NOT_HELD。为什么?
确实是UAC,正如基督徒所怀疑的那样。
MSDN: Windows Vista Application Development Requirements for User Account Control Compatibility:
What privileges the filtered token contain are based on whether the original token contained any of the restricted RIDS listed above (ed: AKA if you’re a non-elevated Admin). If any of the restricted RIDs were in the token,all of the privileges are removed except:
- SeChangeNotifyPrivilege
- SeShutdownPrivilege
- SeUndockPrivilege
- SeReserveProcessorPrivilege
- SeTimeZonePrivilege