Author: Mandy Tidwell, Senior Consultant
Applies to: Windows Vista SP1
Setting: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create Symbolic Links
History: After implementing FDCC on Windows Vista SP1, running the GPResults Wizard and navigating to
results in the following error:
An error has occurred while collecting data for Security Configuration Engine (SCE) Extension.
This error impacts the following settings:
Account Policies (Password Policy, Account Lockout Policy, Kerberos Policy)Local Policies (Audit Policy, User Rights Assignment, Security Options)Event LogRestricted GroupsSystem ServicesRegistryFile System
The following errors apply to all of the above settings:
An unknown error occurred while data was gathered for this extension. Details: Requested value 'SeCreateSymbolicLinkPrivilege' was not found.
Issue: When the above policy is set to any value, the above error is logged.
Result: Security Setting information is unavailable in GPResult output. This problem does not affect Resultant Set of Policy (RSOP) output.
Resolution: This issue has been confirmed to be a problem with Windows Vista SP1 and there is a fix available. Because the fix is not publicly available at this time, please contact Microsoft Customer Support and reference KB number 955857. Note that this KB article is not yet publically available at the time of writing this blog but can be referenced to Microsoft Support.
The following link provides information on contacting Microsoft support: http://support.microsoft.com/oas/default.aspx?prid=11274&gprid=500921.