Selectively allow the evaluation of a symbolic link

Policy ID
SymlinkEvaluation
Scope
Computer Configuration
Supported on
At least Windows Vista
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
System › Filesystem

Description

Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disable the evaluation of these types of symbolic links:

Local Link to a Local Target
Local Link to a Remote Target
Remote Link to Remote Target
Remote Link to Local Target

For further information please refer to the Windows Help section

NOTE: If this policy is Disabled or Not Configured, local administrators may select the types of symbolic links to be evaluated.

Options

The empty box and the checked box tell the checkbox items of the Group Policy editor apart (a checked box is an item that is selected by default).

  • Local Link to Local Target
  • Local Link to a Remote Target
  • Remote Link to Remote Target
  • Remote Link to Local Target

Registry

ComputerHKEY_LOCAL_MACHINE
  • SymLinkStateREG_DWORD
  • SymlinkLocalToLocalEvaluationREG_DWORD
  • SymlinkLocalToRemoteEvaluationREG_DWORD
  • SymlinkRemoteToRemoteEvaluationREG_DWORD
  • SymlinkRemoteToLocalEvaluationREG_DWORD

Other policies in the same category

View all policies in this category (8)