runas problem on Windows 10

floaka

Hello OpenVPN team !

I'm actually using OpenVPN on many computers with runas (for admin permission) because my users don't have admin right
It's ok on Windows 7 but I have some problems on Windows 10.

I started to upgrade from Win7 to Win10 and some of these computers (not all) can't connect by runas shortcut.
I don't have this problem on fresh Win10 install.

When I execute the shortcut I see OpenVPN in systray. But I have error when I'm connecting moreover it's working when I execute by right click and run as administrator
I tried to update and reinstall but nothing seems to work.

Maybe it's not OpenVPN problem but more with runas option.
But it's working on others computers in exact same configuration.

Thank you

Traffic

What with windows being closed source and Microsoft making updates without user consent .. and all the different versions of windows and openvpn .. and all the different ways administrators try do do things .. it is not easy trying to figure out what you need to do ..

floaka wrotemoreover it's working when I execute by right click and run as administrator

As far as I am concerned this is a prerequisite to using openvpn, even if you are logged in as administrator. Thank microsoft ..

floaka

Thank for your quick answer

I upgraded at least ten computers and only two of them have this problem.
Others computers working even with old OpenVPN version (like 2.2.2)

I tried many thing like other local session, other login for runas (local and domain admin).
Every times I see GUI in systray but in non admin mode.
🙁

Traffic

Currently a privilege separation scheme is in development for openvpn, which will allow users to manage openvpn without administrator login. But .. it is likely to have many teething problems on initial release.

Perhaps you can find something useful here:
https://community.openvpn.net/openvpn/wiki/PrivilegeSeparation

Chrilli

Hi floaka,

I just wanted to say that you are not alone with this problem. I have exactly the same situation here in my company. I upgraded 3 systems to Win10 and all can't connect anymore when I let OpenVPN start with runas. Everything is fine when I rightclick and start as administrator.

Best
chrilli

Chrilli

Hi floaka,
I just figured out the solution. In Windows 10 the Admin Approval Mode for Administrators is enabled by default. You can disable it in GPO:
windows settings/security settings/local policies/security options/User Account Control: Admin Approval Mode for built in Administrator account
Worked perfektly for me.
Best
chrilli