I'm not able to start openVPN connections without administative priviliges, even when using the new interactive service (openvpnserv2) of the 2.4.0 client release because of group membership (detection) issues. [b]Environment:[/b] I'm using Windows 10 Enterprise (1607) 64bit in german. My VPN user account has domian-user rights only. Client has been installed using local administrator rights. No error occured during install. After install, the "OpenVPN Intractive service" was running. "OpenVPN Legacy Service" and "OpenVpnService" was not running (IMHO ok). The "OpenVPN Administrators" group was not created during Setup (normal?). My connection profile is located in "%userprofile%\OpenVPN\config" and was successfully detected by openVPN GUI. [b]Problem:[/b] If i start the connection via openVPN GUI, I get following message: [quote]Starting this connection (name) requires membership in "openVPN Administrators" group. Do you want to add yourself to this group? This action may prompt for administrtaive password or consent.[/quote] Therefore I provide local administrator credentials but get an error saying [quote]Adding the user to "OpenVPN Administrators" group failed.[/quote] If I now check the local user and group configuration, the missing "OpenVPN Administrators" Group has been created and my been added to it. But even after a reboot I still get the "Starting this connection (name) requires membership in "openVPN Administrators" Group." error. Maybe it is a problem with the localized german Windows group names? What rights are normally assigned to the "openVPN Administrators" group? Will it become member of the network configuration operators or any other group? Thanks Daniel

You may find some help [url=https://community.openvpn.net/openvpn/ticket/810]here[/url]

openVPN 2.4.0 Win10 new interactive service group problem

adelphi

I'm not able to start openVPN connections without administative priviliges, even when using the new interactive service (openvpnserv2) of the 2.4.0 client release because of group membership (detection) issues.

Environment:
I'm using Windows 10 Enterprise (1607) 64bit in german. My VPN user account has domian-user rights only. Client has been installed using local administrator rights.
No error occured during install. After install, the "OpenVPN Intractive service" was running. "OpenVPN Legacy Service" and "OpenVpnService" was not running (IMHO ok). The "OpenVPN Administrators" group was not created during Setup (normal?).
My connection profile is located in "%userprofile%\OpenVPN\config" and was successfully detected by openVPN GUI.

Problem:
If i start the connection via openVPN GUI, I get following message:

Starting this connection (name) requires membership in "openVPN Administrators" group.
Do you want to add yourself to this group?
This action may prompt for administrtaive password or consent.

Therefore I provide local administrator credentials but get an error saying

Adding the user to "OpenVPN Administrators" group failed.

If I now check the local user and group configuration, the missing "OpenVPN Administrators" Group has been created and my been added to it.
But even after a reboot I still get the "Starting this connection (name) requires membership in "openVPN Administrators" Group." error.

Maybe it is a problem with the localized german Windows group names?
What rights are normally assigned to the "openVPN Administrators" group? Will it become member of the network configuration operators or any other group?

Thanks
Daniel

TinCanTech

You may find some help here