I saw the option for that as well in the docs however I was not sure how that worked or if it had to run as administrator or anything else. I had not played around with it and frankly was just quite ticked that OpenVPN would even tell you that it was connected and everything is wonderful when its not and it needs administrative rights to right to the routing tables. If that was the case and this is a known fact then then Run as administrator check box should be automatically checked when you install the software. I have been pulling my hair out for months as to why this wasn't working properly (Was it my server? Is it the configuration file? Is the client disconnecting from the Internet and terminating the connection prematurely? Is it a problem with the clients computer? Is there some software that is preventing this from happening? Am I just a dumbass and didn't install this properly since this was my first installation and configuration? My server says connected, the vpn says connected but resources on the server are being denied. Uninstall, reinstall everything works. A week later, client says nope not working.... ahhhhhhhhhhhhhhhh... repeat process with hours of troubleshooting in between every couple of weeks for months and months and months.)
Sorry, just ranting now. Thanks for the tip on the installing as a service.
I probably should have gone further into that people that get the blank password error can allow blank passwords if they have a Windows Professional version. They can go into secpol.msc from the run dialogue box and allow blank passwords as well so that the runas will work (If their administrator account doesn't already have a password):
http://www.pctips3000.com/how-to-enable-windows-7-computer-to-accept-blank-passwords-while-accessing-through-the-network/
If it still doesn't work they can also activate the administrator account by opening up an administrative command prompt and typing
net user administrator /active:yes if it is still not working
http://www.howtogeek.com/howto/windows-vista/enable-the-hidden-administrator-account-on-windows-vista/
They can then login to the administrator account and set a password and then use that when they run the bat file.
However then it will probably show up in their login screen for the client so they probably want to hide it after they activate it.
Hide User Accounts in windows Vista and Windows 7
In the Run Dialogue Box (Windows Key+R) type regedit
Once in regedit go to HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon
In the left panel, right click on Winlogon and click New and click Key.
Type SpecialAccounts and press Enter
In the left panel, right click on SpecialAccounts and click New and click Key.
Type UserList and press Enter.
In right panel of UserList, right click on a empty area and click New then click DWORD (32bit) Value.
Type in the name of the user account that you want to hide and press Enter.eg: Everyday Account.
In the right panel, right click on the user account name and click Modify.
To hide the user account – Type 0 and click OK. (number zero not the letter)
Whenever you want to use the account just unhide the it by typing 1 instead of zero.
===============================================
If you don't have a professional version of Windows then you won't have secpol.msc so you can either use option 2 OR
read the instructions above about activating the administrator's account and then setting the password and then hiding the administrator's account from the login screen.
Wayne
