Open VPN - Run as administrator work around ?

[mikkydoos]

Hi,

 

Just installed Smoothwall and have OpenVPN for remote access.

 

Whats the workaround for running Open VPN without 'run as administrator' for standard users ?

 

 

Cheers in advance ; )

[pete]

https://community.openvpn.net/openvpn/wiki/275-why-cant-i-run-openvpn-on-windows-from-a-non-admin-user-account

 

Try this:

 

OpenVPN MI GUI - A Windows GUI for the OpenVPN client

 

We use it for always-up links, so I haven't had to deal with end-users.

[teejay]

If you add them to the Network Configuration Operators local group that should work.

[mikkydoos]

Thing is they'll be logging on to their domain account from home with cached credentials, not a local account.

 

When they VPN in it should connect their redirected folders and mapped drives.

[teejay]

Doesn't matter if it's a domain cached account, you just add that account to the local Network Configuration Operators group. As long as they've logged in at least once on the machine with the cached account it will work.

[mikkydoos]

Sweet. I'll give it a bash

[mikkydoos]

erm...

 

how do I add a cached user to a local group?

[teejay]

With the machine connected to the network, go into control panel, manage user accounts, advanced, advanced user management, groups, double click on groups, double click on network configuration operators, add, change location to your ad tree rather than local users, add the user name

[mikkydoos]

You know what.. I never knew you could do that.

 

Cheers lol ; )

[teejay]

No problem, just don't do what I did at first, which was to add the teachers domain group rather than the individual users, which works fine on the network, just has a bit of a problem in not seeing the group when they take them home:doh:

[mikkydoos]

One quickie Teejay. Folder redirection.

 

Your tip worked a treat. I can connect, ping and access my LAN but redirected folders won't display (Desktop and My Docs)

 

I presume this is one of two things...

 

Either a temporary profile is created when I log on so has its own Desktop and My Docs within the temp profile

 

or

 

Slow link detection is too low in GPO.

 

Would be better if I could connect the VPN pre logon so all my GPO's apply upon login. Is there any way to do this with Open VPN ??

Its either that or I'll use Shrew VPN.

[teejay]

Could be slow link is too low, worth checking.

A few things to try, from an admin command prompt type route -F to reset the routing table and then reboot. Also, do a gpupdate /force to make sure the machine does actually have the correct GP's installed.