On Aug 10 18:02, Jon Turney wrote: > I'm not sure if SeCreateSymbolicLink privilege can get removed by UAC > filtering, but to make sure to enable it, if we can.
I'm not sure this is required. This is one of the privileges which is enabled automatically on usage if it's present in the token and not marked as "deny only". UAC removes the privilege entirely from the token, so you can't enable it in that case. Corinna
