My parents use a Win7 laptop. I have set it so that they are not administrators of the device, only I am. I have installed OpenVPN for them to access the home network resources when they are out. The problem is they cannot start the client without admin privileges, since the route cannot be added to the system without.
I made a workaround by letting the OpenVPN client start from scheduled tasks with a trigger when somebody logs in. That works while they’re out, but breaks their network connectivity at home. On top of that, since the client is at that time started as a different user, the UI is not visible.
What would be the best way to provide them with the OpenVPN client, without giving them more privileges?
asked Nov 13, 2012 at 20:24
1
OpenVPN can be run as a service which can either be run automatically at startup or you can give certain users permissions to control the service. Below is a link to an article describing this configuration:
HowTo Run OpenVPN as a non-admin user in Windows
Also see the install notes on running OpenVPN as a service to see some limitations.
answered Nov 13, 2012 at 20:55
heavydheavyd
61.9k18 gold badges152 silver badges174 bronze badges
I have found there is another way to provide users with the ability to start OpenVPN without granting them full admin privileges. To achieve this you can use mmc with the Local Users and Groups snap-in and add a specific user to the Network Configuration Operators group. This provides the said user with the ability to change the routing table (which is critical to VPN) but does not escalate privileges beyond network configuration (e.g. they cannot install software, modify the registry, etc.).
To launch OpenVPN the user has to right-click the OpenVPN icon and select Run as administrator, then they need to provide their password.
answered Feb 13, 2014 at 10:28
ErathielErathiel
5625 silver badges11 bronze badges
If you log in as an admin, right click on the OpenVPN shortcut, and select Properties you should be able to go to the Compatibility tab and change the settings for all users (Run As Administrator). I’m not 100% sure if this will work for a limited user, I’ll try to test later today.
answered Nov 13, 2012 at 20:28
Jim G.Jim G.
3,19214 silver badges19 bronze badges
1
My parents use a Win7 laptop. I have set it so that they are not administrators of the device, only I am. I have installed OpenVPN for them to access the home network resources when they are out. The problem is they cannot start the client without admin privileges, since the route cannot be added to the system without.
I made a workaround by letting the OpenVPN client start from scheduled tasks with a trigger when somebody logs in. That works while they’re out, but breaks their network connectivity at home. On top of that, since the client is at that time started as a different user, the UI is not visible.
What would be the best way to provide them with the OpenVPN client, without giving them more privileges?
asked Nov 13, 2012 at 20:24
1
OpenVPN can be run as a service which can either be run automatically at startup or you can give certain users permissions to control the service. Below is a link to an article describing this configuration:
HowTo Run OpenVPN as a non-admin user in Windows
Also see the install notes on running OpenVPN as a service to see some limitations.
answered Nov 13, 2012 at 20:55
heavydheavyd
61.9k18 gold badges152 silver badges174 bronze badges
I have found there is another way to provide users with the ability to start OpenVPN without granting them full admin privileges. To achieve this you can use mmc with the Local Users and Groups snap-in and add a specific user to the Network Configuration Operators group. This provides the said user with the ability to change the routing table (which is critical to VPN) but does not escalate privileges beyond network configuration (e.g. they cannot install software, modify the registry, etc.).
To launch OpenVPN the user has to right-click the OpenVPN icon and select Run as administrator, then they need to provide their password.
answered Feb 13, 2014 at 10:28
ErathielErathiel
5625 silver badges11 bronze badges
If you log in as an admin, right click on the OpenVPN shortcut, and select Properties you should be able to go to the Compatibility tab and change the settings for all users (Run As Administrator). I’m not 100% sure if this will work for a limited user, I’ll try to test later today.
answered Nov 13, 2012 at 20:28
Jim G.Jim G.
3,19214 silver badges19 bronze badges
1
|
pintoxin 0 / 0 / 0 Регистрация: 01.08.2015 Сообщений: 2 |
||||
|
1 |
||||
|
01.08.2015, 14:18. Показов 11337. Ответов 2 Метки нет (Все метки)
Добрый день. Всех с прошедшим днем СисАдмина Sat Aug 01 14:04:53 2015 NOTE: FlushIpNetTable failed on interface [10] {479B7486-6A3F-4A13-97B3-F53C36F90357} (status=5) : Отказано в доступе. Я пробовал
Пароль сохранил но программа все равно не запускается AdminLink тоже не помог. Ярлык выдает ошибку it maybe.executable file was changed due to virus or hacker attack
__________________
0 |
|
4330 / 2120 / 661 Регистрация: 26.04.2015 Сообщений: 6,823 |
|
|
01.08.2015, 23:10 |
2 |
|
pintoxin, Надо в зоопарк взять директора в качестве админа или наоборот.
0 |
|
kerbyteflon 78 / 79 / 21 Регистрация: 10.04.2010 Сообщений: 262 |
||||
|
07.07.2016, 14:47 |
3 |
|||
|
Нужно писать
вопрос как сюда вставить параметр запуска клиента?
0 |