This policy setting determines the strength of the default discretionary access control list (DACL) for objects. The setting helps secure objects that can be located and shared among processes and its default configuration strengthens the DACL, because it allows users who are not administrators to read shared objects but does not allow them to modify any that they did not create. This policy setting determines the strength of the default discretionary access control list (DACL) for objects. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options!System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links) (2) REG: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager!ProtectionMode