From b10a0af8b3a88c4170403679b9c179258a225abe Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@your-file-system.com>
Date: Fri, 10 Aug 2012 18:04:49 -0400
Subject: [PATCH] Windows: document command prompt lnk limitation

Command Prompt shortcuts cannot be used when stored in AFS.

Change-Id: I5e26d92bbcaac8708eb8deb8d06164ef65308230
Reviewed-on: http://gerrit.openafs.org/7955
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Jeffrey Altman <jaltman@your-file-system.com>
Tested-by: Jeffrey Altman <jaltman@your-file-system.com>
---
 doc/xml/ReleaseNotesWindows/relnotes.xml | 35 +++++++++++++++++-------
 1 file changed, 25 insertions(+), 10 deletions(-)

diff --git a/doc/xml/ReleaseNotesWindows/relnotes.xml b/doc/xml/ReleaseNotesWindows/relnotes.xml
index b62c8e68c..294b9fe21 100644
--- a/doc/xml/ReleaseNotesWindows/relnotes.xml
+++ b/doc/xml/ReleaseNotesWindows/relnotes.xml
@@ -1786,16 +1786,31 @@
       The following is a list of known issues when using the IFS redirector driver:
       <itemizedlist>
       <listitem>
-		<para>It is not possible to execute an application out of AFS under
-   the following conditions:
-      <itemizedlist>
-      <listitem><para>The path is a drive letter mapping</para></listitem>
-      <listitem><para>The application requires elevated privileges</para></listitem>
-      </itemizedlist>
-   Workaround: use SUBST instead of NET USE to assign drive
-   letters to UNC paths.
-      </para>
-      </listitem>
+            <para>Command Prompt .LNK files do not behave properly when stored within AFS <itemizedlist>
+                <listitem>
+                  <para>Custom properties will be ignored.</para>
+                </listitem>
+                <listitem>
+                  <para>It is not possible to make changes to the LNK properties.</para>
+                </listitem>
+              </itemizedlist> These issues are the result of the <emphasis role="italic">Console
+                Window Host</emphasis> process (conhost.exe) running outside the logon session's
+              authentication group.  While conhost.exe impersonates the Windows user, it does not
+              impersonate a logon session process.  As a result, it has no tokens and cannot access
+              the LNK file.</para>
+          </listitem>
+          <listitem>
+            <para>It is not possible to execute an application out of AFS under the following
+              conditions: <itemizedlist>
+                <listitem>
+                  <para>The path is a drive letter mapping</para>
+                </listitem>
+                <listitem>
+                  <para>The application requires elevated privileges</para>
+                </listitem>
+              </itemizedlist> Workaround: use SUBST instead of NET USE to assign drive letters to
+              UNC paths. </para>
+          </listitem>
       <listitem>
       <para>The Windows File System <ulink url="http://msdn.microsoft.com/en-us/library/ff549293%28v=vs.85%29.aspx">Volume Query Quota Interface</ulink> is not implemented.  As a result, AFS quota information is not available to application processes or end users via Windows dialogs.</para>
       </listitem>
-- 
2.39.5