Hi, On Fri, Dec 11, 2015 at 2:34 PM, Simon Deziel <simon.dez...@gmail.com> wrote:
> > > > Actually this is what people do today (set the shortcut to the gui to > > "[X] run as admin") to work around the permission issues. > > > > Never thought of doing this for openvpn.exe, though. But then, I won't > > claim to understand the intricacies of windows permission control and > > UAC. > > On Windows, I personally tend to use the OpenVPN service and if/when I > need a user to control the said service, I use "subinacl" as described > in solution #1 here: > > http://openvpn.se/files/howto/openvpn-howto_run_openvpn_as_nonadmin.html > > This have worked pretty well for my few users. Yeah, you are right, there are a number of ways that a resourceful user could adopt. But we also need a solution that works out of the box for clue-less users who would otherwise disturb sysadmins' cat nap ;) So run-as admin by default is aimed at users who have admin privilege (but UAC enabled) or has admin password. This is the scenario with very many single user windows machines. In the other case of user not having admin privilege, starting at boot using service (or NSSM) and use a GUI that can talk to it is better (say, using MI-GUI). NSSM is very stable, users would never have the need to restart the service. When they do, they can reboot ;) In such setups one also has to be more cautious about what privileges to delegate etc.. We'll leave that to sysadmins. Selva
------------------------------------------------------------------------------
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
