by default windows 7 does not trust the tap-win32 adapter and hence blocks most kinds of access. You can overcome this by adding a (bogus) default route to the config file. When pushing from the server you'd use something like
push "route 0.0.0.0 0.0.0.0 vpn_gateway 999
(the 999 is the route metric).
Once Win7 trusts the tap-win32 adapter you can assign to the 'home' or 'work' groups and then you ping and access shares. Don't you just love Mickeysoft 😉
