It's very old. :) Same program dates back to SLIP connections.

It's called rasdial.exe.

From: [email protected] [mailto:[email protected]] On 
Behalf Of Melvin Backus
Sent: Friday, April 3, 2015 2:06 PM
To: [email protected]
Subject: [NTSysADM] Starting VPN connections from non-admin accounts

I thought we'd figured this out but ran into a roadblock I'm hoping some can 
help with.  My searches have brought up lots of solutions to starting programs 
as admin and avoiding UAC, etc., but I've yet to find a way to start the normal 
VPN connection that gets created with the CMAK profiles.

We've added our remote users to the "Network Configuration Operators" group on 
the local machine so they should be able to manipulate routes, etc., but in 
order for the CMAK profile to connect it tries to run CMRoute.exe which runs 
elevated.  If the user is in the local admin group that's no problem, but when 
they aren't it either just fails if UAC is turned off, or prompts for 
credentials if UAC is turned on.

I found several references to creating elevated shortcuts, etc., and even one 
which created a scheduled task to do the dirty work with a local admin account 
that got called by whatever shortcut you create.  The problem is that I haven't 
figured out how to start that VPN connection from the scheduled task and I also 
haven't found a way to modify the properties on the shortcut it creates on the 
desktop.  The object itself is just shown as a GUID in the shortcut.

Can anyone point me to the related executable, a way to start the connection 
from a scheduled task, or some other magical thing I haven't thought of trying 
yet?

Thanks

--------------------
Melvin Backus | Sr. Systems Engineer | Byers Engineering Company | 404.497.1565
Service Desk | 404-497-1599 | http://servicedesk.byers.com
--
There are 10 kinds of people in the world...
         those who understand binary and those who don't.


Reply via email to