| Previous | Next |
| ERROR_INCORRECT_SIZE | ERROR_SYMLINK_NOT_SUPPORTED |
ERROR_SYMLINK_CLASS_DISABLED
The symbolic-link evaluation class is disabled.
ERROR_SYMLINK_CLASS_DISABLED is Win32 error 1463 (0x5B7). Windows distinguishes symbolic-link evaluation by where the link and target reside, such as local-to-local or remote-to-local paths. Administrative policy can disable a class, causing path traversal to stop even though the link object and its target syntax are otherwise valid.
Contexts to identify
- a local path contains a link whose target is on a network share
- a remote share exposes a link that points to another remote or local location
- the same path works interactively but fails under a machine with different policy
- a deployment changed symbolic-link evaluation settings
- an application unexpectedly follows links supplied by untrusted content
Evidence to capture
Record the original path, link path, substitute target, whether each side is local or remote, calling identity, share and server names, API flags, and current symbolic-link evaluation policy. Preserve the reparse-point data when appropriate. Avoid logging credentials embedded in network paths.
Diagnostic sequence
Resolve the path component by component to find the exact symbolic link that triggers the failure. Classify the transition between link location and target. Compare policy on a working and failing computer, including domain-applied configuration. Confirm that the result is not instead caused by an unreachable target or access denial.
Evaluate why the class is disabled before changing it. Remote-to-local and remote-to-remote traversal can create security surprises, redirect trusted paths, or cross administrative boundaries. The application may be better served by rejecting links or requiring an explicit configured target.
Recovery and administration
Use a direct supported path, move the link and target into an allowed relationship, or enable the required class only after security review. Apply policy consistently and document the dependency. Application code should expose the blocked link and class in diagnostics rather than repeatedly retrying file access.
Difference from unsupported operations
ERROR_SYMLINK_NOT_SUPPORTED says the application or operation does not support acting on a symbolic link in that manner. Error 1463 says Windows policy prevents following the link class itself.
Example
A build workspace on a network share contains a link to another server. It works on a developer machine but fails with 1463 on hardened build agents where remote-to-remote evaluation is disabled. Replacing the link with an explicit configured share removes the hidden cross-server traversal.
References
- Microsoft: System Error Codes (1300–1699)
- Microsoft: Symbolic Link Programming Considerations
- Microsoft: Reparse Points
Looking for a different code? Search another status or error code.
