On Sun, Aug 7, 2016 at 8:55 AM, Илья Шипицин <chipits...@gmail.com> wrote:

> I also noticed, that "openvpn administrators" membership is required.
> Should we modify installer to make it adf current user to that group?
With multiple users on a system, the installer will have to choose which
users are to be added etc. Also for newly created users the membership will
not be automatic.

For simple setups with one or two users who have access to the admin
password, I think, the current setup where the GUI provides a way to add
themselves to the group looks good enough. In a vast majority of cases
where users are also administrators everything is automatic: UAC will
ensure that the GUI runs with limited rights and thus use the interactive
service, and the service will permit config from any location because of
user's membership in the "Administrators" group.

For more complex setups, I suppose the sysadm would want to fine-tune
membership in the "OpenVPN Administrtaors" group as needed.


Reply via email to