Selectively allow the evaluation of a symbolic link

Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disable the evaluation of these types of symbolic links:

Local Link to a Local Target
Local Link to a Remote Target
Remote Link to Remote Target
Remote Link to Local Target

For further information please refer to the Windows Help section

NOTE: If this policy is Disabled or Not Configured, local administrators may select the types of symbolic links to be evaluated.

Supported on: At least Windows Vista

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\Filesystems\NTFS
Value NameSymLinkState
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

Local Link to Local Target
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\Filesystems\NTFS
Value NameSymlinkLocalToLocalEvaluation
Value TypeREG_DWORD
Default Value0
True Value1
False Value0
Local Link to a Remote Target
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\Filesystems\NTFS
Value NameSymlinkLocalToRemoteEvaluation
Value TypeREG_DWORD
Default Value0
True Value1
False Value0
Remote Link to Remote Target
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\Filesystems\NTFS
Value NameSymlinkRemoteToRemoteEvaluation
Value TypeREG_DWORD
Default Value0
True Value1
False Value0
Remote Link to Local Target
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\Filesystems\NTFS
Value NameSymlinkRemoteToLocalEvaluation
Value TypeREG_DWORD
Default Value0
True Value1
False Value0

filesys.admx

Administrative Templates (Computers)

Administrative Templates (Users)