Start menu junction

I forget in which windows version this changed, but it used to be that the user start menu was found in;

c:\users\<user>\Start Menu (or the equivalent win xp or win 2k directory)

At some point, they changed that to a junction that points to the real place. Ok.

Here is my question: Why do they deny everybody, including adminstrators the ability to follow that junction?

I find that inconvenient, so when I come across those forbidden paths, I just change the permissions so I can follow them.

The next question is: What will that screw up, or what security hole will that create?

The only meaningful thing that I can think of is that it might create junction loops that might get followed by an unsuspecting program.

Thanks.

I don't think you all are understanding my question. I am aware of where those junctions point. I also am aware that I can access those places directly.

My question is WHY did microsoft make the junctions deny access even to administrator?

If you are interested in knowing why I would like to follow the junction, rather than go directly to the new place, it is because after learning where things are in the past 39 different places that the last 7 different windows versions have put these things, I don't always remember which place they have decided to hide them this week, and I might initially ook at a place from a previous version.

It is also true that with for example linkshellextension, I can discover where the junction points without following it, and then open the target.

However, my ACTUAL QUESTION is WHY did microsoft make the junctions unfollowable?

This is not a court of law. I do not feel required to offer proof of what I state.

Attempts to follow the junction in explorer result in "<dir> is not accessible". Removing the permission "Everybody deny" then allows following the junction and does not result in that error mesage. I do that as a member of the adminstrator group, and the permissions for that junction initially include "deny everybody" and my user and administrators "allow full control".

If you do not care to answer the question, please stop replying.

@apb: Sometimes people can't read. Even those who claim to be "gurus".

I see your point. In explorer I tried to access C:\Users\margrave\My Documents
I get a popup that says C:\Users\margrave\My Documents it not accessible. Access is denied.

But I cannot answer your question. I don't know why the junction is locked. Maybe someone else can answer.

margrave55 said:

@apb: Sometimes people can't read. Even those who claim to be "gurus".

I see your point. In explorer I tried to access C:\Users\margrave\My Documents
I get a popup that says C:\Users\margrave\My Documents it not accessible. Access is denied.

But I cannot answer your question. I don't know why the junction is locked. Maybe someone else can answer.

Thank you.