Policy

Selectively allow the evaluation of a symbolic link

Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disable the evaluation of these types of symbolic links: Local Link to a Local Target Local Link to a Remote Target Remote Link to Remote Target Remote Link to Local Target For further information please refer to the Windows Help section NOTE: If this policy is Disabled or Not Configured, local administrators may select the types of symbolic links to be evaluated.

Policy
Pack Microsoft Windows
Category System / Filesystem
Policy ID 0eb7b41a1e0f
Internal name SymlinkEvaluation

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\Filesystems\NTFS\SymLinkState (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\Filesystems\NTFS\SymLinkState (disabled) = 0
HKLM\Software\Policies\Microsoft\Windows\Filesystems\NTFS\SymlinkLocalToLocalEvaluation
HKLM\Software\Policies\Microsoft\Windows\Filesystems\NTFS\SymlinkLocalToRemoteEvaluation
HKLM\Software\Policies\Microsoft\Windows\Filesystems\NTFS\SymlinkRemoteToRemoteEvaluation
HKLM\Software\Policies\Microsoft\Windows\Filesystems\NTFS\SymlinkRemoteToLocalEvaluation

Policy notes

Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disable the evaluation of these types of symbolic links: Local Link to a Local Target Local Link to a Remote Target Remote Link to Remote Target Remote Link to Local Target For further information please refer to the Windows Help section NOTE: If this policy is Disabled or Not Configured, local administrators may select the types of symbolic links to be evaluated.

Related policies