OpenVPN 2.7.9 route add (methode exe and adaptive)

Rob

Just updated from 2.7.8 to 2.7.9 on Windows10 and I get errors during route add because the GUI doesn't have enough rights? I thought the OpenVPN Interactive Service (Local System) was used to get those rights. When I launch the GUI as elevated then the route add works correctly. I have administrators right to test that but how about users that are only in the users group and can't do that?
I did read something in the changelog about changes in route, are these changes something that can cause this?

Can anyone validate this finding? if this is real how can this be forwarded?

Rob

This is the OpenVPN GUI log when running as NONE elevated administrator (think users will see the same)

Fri Nov 6 14:53:06 2026 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.9.25.22,topology subnet,tun-mtu 1420,ping 10,ping-restart 50,route 172.28.36.0 255.255.255.0,route 198.18.17.16 255.255.255.255,route-metric 2000,ifconfig 10.9.14.50 255.255.0.0,peer-id 0,cipher AES-256-GCM,protocol-flags cc-exit tls-ekm dyn-tls-crypt aead-epoch,tun-mtu 1420'
Fri Nov 6 14:53:06 2026 OPTIONS IMPORT: --ifconfig/up options modified
Fri Nov 6 14:53:06 2026 OPTIONS IMPORT: route options modified
Fri Nov 6 14:53:06 2026 OPTIONS IMPORT: route-related options modified
Fri Nov 6 14:53:06 2026 OPTIONS IMPORT: tun-mtu set to 1420
Fri Nov 6 14:53:06 2026 interactive service msg_channel=668
Fri Nov 6 14:53:06 2026 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=16 HWADDR=68:05:ca:80:4c:e5
Fri Nov 6 14:53:06 2026 open_tun
Fri Nov 6 14:53:06 2026 TAP-Windows Driver Version 9.27
Fri Nov 6 14:53:06 2026 Set TAP-Windows TUN subnet mode network/local/netmask = 10.9.0.0/10.9.14.50/255.255.0.0 [SUCCEEDED]
Fri Nov 6 14:53:06 2026 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.9.14.50/255.255.0.0 on interface {48CC9E7D-E125-4A15-9042-DA86E6F3E811} [DHCP-serv: 10.9.0.0, lease-time: 31536000]
Fri Nov 6 14:53:06 2026 Successful ARP Flush on interface [6] {48CC9E7D-E125-4A15-9042-DA86E6F3E811}
Fri Nov 6 14:53:06 2026 tap-windows6 device [LAN-verbinding] opened
Fri Nov 6 14:53:06 2026 MANAGEMENT: >STATE:1793973186,ASSIGN_IP,,10.9.14.50,,,,
Fri Nov 6 14:53:06 2026 IPv4 MTU set to 1420 on interface 6 using service
Fri Nov 6 14:53:06 2026 Data Channel: cipher 'AES-256-GCM', peer-id: 0
Fri Nov 6 14:53:06 2026 Timers: ping 10, ping-restart 50
Fri Nov 6 14:53:06 2026 Protocol options: protocol-flags cc-exit tls-ekm dyn-tls-crypt aead-epoch
Fri Nov 6 14:53:11 2026 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Fri Nov 6 14:53:11 2026 MANAGEMENT: >STATE:1793973191,ADD_ROUTES,,,,,,
Fri Nov 6 14:53:11 2026 C:\WINDOWS\system32\route.exe ADD 172.28.36.0 MASK 255.255.255.0 10.9.25.22 METRIC 2000
Fri Nov 6 14:53:11 2026 ERROR: route addition failed using CreateIpForwardEntry: Toegang geweigerd. [status=5 if_index=6]
Fri Nov 6 14:53:11 2026 Route addition fallback to route.exe
Fri Nov 6 14:53:11 2026 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Fri Nov 6 14:53:11 2026 ERROR: Windows route add command failed [adaptive]: returned error code 1
Fri Nov 6 14:53:11 2026 C:\WINDOWS\system32\route.exe ADD 198.18.17.16 MASK 255.255.255.255 10.9.25.22 METRIC 2000
Fri Nov 6 14:53:11 2026 ERROR: route addition failed using CreateIpForwardEntry: Toegang geweigerd. [status=5 if_index=6]
Fri Nov 6 14:53:11 2026 Route addition fallback to route.exe
Fri Nov 6 14:53:11 2026 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Fri Nov 6 14:53:11 2026 ERROR: Windows route add command failed [adaptive]: returned error code 1
Fri Nov 6 14:53:11 2026 Initialization Sequence Completed
Fri Nov 6 14:53:11 2026 MANAGEMENT: >STATE:1793973191,CONNECTED,ROUTE_ERROR,10.9.14.50,104.45.10.22,1194,,
Fri Nov 6 14:53:10 2026 ERROR: Some routes were not successfully added. The connection may not function correctly

This is the OpenVPN GUI log when running as ELEVATED administrator

Fri Nov 6 14:55:20 2026 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.9.25.22,topology subnet,tun-mtu 1420,ping 10,ping-restart 50,route 172.28.36.0 255.255.255.0,route 198.18.17.16 255.255.255.255,route-metric 2000,ifconfig 10.9.14.57 255.255.0.0,peer-id 2,cipher AES-256-GCM,protocol-flags cc-exit tls-ekm dyn-tls-crypt aead-epoch,tun-mtu 1420'
Fri Nov 6 14:55:20 2026 OPTIONS IMPORT: --ifconfig/up options modified
Fri Nov 6 14:55:20 2026 OPTIONS IMPORT: route options modified
Fri Nov 6 14:55:20 2026 OPTIONS IMPORT: route-related options modified
Fri Nov 6 14:55:20 2026 OPTIONS IMPORT: tun-mtu set to 1420
Fri Nov 6 14:55:20 2026 interactive service msg_channel=792
Fri Nov 6 14:55:20 2026 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=16 HWADDR=68:05:ca:80:4c:e5
Fri Nov 6 14:55:20 2026 open_tun
Fri Nov 6 14:55:20 2026 TAP-Windows Driver Version 9.27
Fri Nov 6 14:55:20 2026 Set TAP-Windows TUN subnet mode network/local/netmask = 10.9.0.0/10.9.14.57/255.255.0.0 [SUCCEEDED]
Fri Nov 6 14:55:20 2026 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.9.14.57/255.255.0.0 on interface {48CC9E7D-E125-4A15-9042-DA86E6F3E811} [DHCP-serv: 10.9.0.0, lease-time: 31536000]
Fri Nov 6 14:55:20 2026 Successful ARP Flush on interface [6] {48CC9E7D-E125-4A15-9042-DA86E6F3E811}
Fri Nov 6 14:55:20 2026 tap-windows6 device [LAN-verbinding] opened
Fri Nov 6 14:55:20 2026 MANAGEMENT: >STATE:1793973320,ASSIGN_IP,,10.9.14.57,,,,
Fri Nov 6 14:55:20 2026 IPv4 MTU set to 1420 on interface 6 using service
Fri Nov 6 14:55:20 2026 Data Channel: cipher 'AES-256-GCM', peer-id: 2
Fri Nov 6 14:55:20 2026 Timers: ping 10, ping-restart 50
Fri Nov 6 14:55:20 2026 Protocol options: protocol-flags cc-exit tls-ekm dyn-tls-crypt aead-epoch
Fri Nov 6 14:55:25 2026 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Fri Nov 6 14:55:25 2026 MANAGEMENT: >STATE:1793973325,ADD_ROUTES,,,,,,
Fri Nov 6 14:55:25 2026 C:\WINDOWS\system32\route.exe ADD 172.28.36.0 MASK 255.255.255.0 10.9.25.22 METRIC 2000
Fri Nov 6 14:55:25 2026 Route addition via ipapi [adaptive] succeeded
Fri Nov 6 14:55:25 2026 C:\WINDOWS\system32\route.exe ADD 198.18.17.16 MASK 255.255.255.255 10.9.25.22 METRIC 2000
Fri Nov 6 14:55:25 2026 Route addition via ipapi [adaptive] succeeded
Fri Nov 6 14:55:25 2026 Initialization Sequence Completed
Fri Nov 6 14:55:25 2026 MANAGEMENT: >STATE:1793973325,CONNECTED,SUCCESS,10.9.14.57,104.45.10.22,1194,,