[OpenAFS] windows "openafs client admins" group - why not afs admins AND administrators?

Christopher D. Clausen cclausen@acm.org
Thu, 26 Jul 2007 15:59:04 -0500

Dan Pritts <danno@internet2.edu> wrote:
> Is it a technical, or a policy, reason that computer administrators
> can't change the afs client config?
> I can imagine having the facility of the afs client admins group
> available, and ANDing that group with the administrators group to
> determine if the user is privileged, but i don't understand the
> current situation.

I specifically requested the current behaviour.  You may not have local 
"Administrators" who are not also smart enough to configure the AFS 
client, but I do.

If its a problem, setup group policy to add the local administrators 
group to the "afs client admins" group and be done with it.