Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I grant a particular user the permission to create symlinks in Windows 7?

I've searched through "Group Policy" and Google, but haven't found anything.

On a side note, is there a way to search through everything in Group Policy Editor? The filters only seem to work on particular subtrees. I never actually found anything using the filters.

share|improve this question
  1. Open the Local Group Policy Editor (gpedit.msc)

  2. Edit the Create symbolic links policy at:

    Computer configuration → Windows Settings → Security Settings → Local Policies → User Rights Assignment → Create symbolic links

    enter image description here

  3. Add the user or group that you want to allow to create symbolic links.

  4. If you've added your own user account, you need to log out and back in for the change to have an effect.

    Note that this setting has no effect on user accounts that belong to the Administrators group. Those users will always have to run mklink in an elevated environment (as Administrator).

There is a handy Excel reference sheet for finding group policy settings: Group Policy Settings Reference for Windows and Windows Server (9/2009)

share|improve this answer
Here it looked more like the following, just for reference if someone gets confused: Control Panel > Administrative Tools > Local Security Policy > Local Policies > User Rights Assignment > Create symbolic links And by the way you need to logout and login again for the settings to apply. – Seldaek May 17 '10 at 19:23
And you can run secpol.msc to skip the first part, then all you got left is : Local Policies > User Rights Assignment > Create symbolic links – Seldaek May 17 '10 at 20:11
Also: Running "gpupdate /force" from either CMD or just the Run dialog should apply the setting as well. – Tobias Plutat Jan 21 '11 at 8:21
iisreset will do this for IIS permissions. – palswim Feb 11 '14 at 19:25
Any way to do the same via registry for Microsoft-hated-non-Windows-8-Pro users? gpedit.msc is not available to them – szx Jun 5 '15 at 18:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.