Is it possible to use symbolic links in Virtualbox shared folder without administrator priviledges?

Question

Is it possible to have Unix guest on Windows 10 host and use symbolic links in Virtualbox shared folders without administrator priviledges?

I'm asking because previously symbolic links on Windows 10 required administator priviledges but now it's possible to enable Developer mode to create symbolic links using standard account and mklink. Thus it make sense there would be a way use the Developer mode to lift the administrator requirement on symbolic links in shared folders as well.

Answer 1

Short answer is yes. It is possible to use symbolic links in Virtualbox shared folders without administrator priviledges and it doesn't even require the Developer Mode.

Here are the step-by-step instructions how to do it, thanks eryksun for helping me out!

1. Launch Local Security Policy app from start menu (or Win+R, then type secpol.msc)
2. Navigate to Local Policies -> User Rights Assignment
3. Open Create symbolic links property. By default it has only Administrators listed.
4. Click Add User or Group... and write Authenticated Users to the Enter the object names to select field to grant the symbolic link priviledge to all users who log on with credetials
5. Close the windows by clicking OKs and log off and log on
6. Now symbolic links are working in VirtualBox shared folders without administrator priviledges!

The Developer Mode didn't help here even though it enables the use of symbolic links without elevated access in two ways:

1. mklink command can be used without elevated access
2. CreateSymbolicLink API can be used without elevated access if you pass dwFlags option SYMBOLIC_LINK_FLAG_ALLOW_UNPRIVILEGED_CREATE

Since even after enabling the Developer Mode VirtualBox has to be run as Administrator in order to create symlinks I assume the method 2 i.e. API calls are used to create the symlinks. Thus VirtualBox code would need to be updated to use the SYMBOLIC_LINK_FLAG_ALLOW_UNPRIVILEGED_CREATE flag. After that update enabling Developer Mode should be sufficient to enable symbolic links in shared folders.