OpenVPN Win 8.1 as nonadmin weird solution (problem)

dernikov1

Hi,
we have problems with client connections (domain users) on Win 8.1. (nonadmin)
We use permanent route on client laptop and till now for WinXP, Win7, client that worked very well (for nonadmin users) we can't use administrator for security reasons.
With Windows 8.1 we bumped on problem.

While client try to connect as non admin user (domain user), with permanent route set, there are no rule. At first users can connect and work, but after they connect/disconnect few times in log we can see tun/tap interface trying to start.
After 10 -15 lines in log (TUN/TAP trying to start up), openvpn client report succesufully conected ( green window), but tap interface don't have ip address ( checked with ipconfig from command.com).
Here start strange behaviour, possible solution. When i open control panel/network, at same time pings start to work, as opening activate tap interface.

In debugging proces, we tried starting process (after PC boot up) as admin trough task scheduler, but allways ask for password under nonadmin user.
If we disable UAC, openvpn don't ask for password, but still don't work (trick with cp opening still work).
If started with OpenVPN.vbs (http://arktronic.com/weblog/2013-11-06/how-to-run-an-elevated-privilege-as-administrator-app-on-windows-startup) script , start openvpn-gui but still ask for password.
There are left two more options, add nonadmin user as "NetworkOperator", and last one add user as local administrator.
I hope that someone can help me with solution.
Thanks!

dernikov1

Just to add testing update.
We use latest OpenVPN program version, and tried older version too, but with no change.
I found that in latest version they solved problem, but that is not true in our case.
After aditional testing adding user to (Power User, Network Operator, and at last Administrator) we experience the same problem.
First connection goes ok, but at second or third it won't bring tun/tap up.
So i would say it is not permission related problem.
Opening control panel/Netwok connection, tun/tap goes up and vpn connection work. That is not solution for us.
Problem in our case, is users low knowledge level, where such "operation" as opening control panel is serios problem. Is there some permanent solution fix, which don't need user intervention ?

Thanks
!