Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

My parents use a Win7 laptop. I have set it so that they are not administrators of the device, only I am. I have installed OpenVPN for them to access the home network resources when they are out. The problem is they cannot start the client without admin privileges, since the route cannot be added to the system without.

I made a workaround by letting the OpenVPN client start from scheduled tasks with a trigger when somebody logs in. That works while they're out, but breaks their network connectivity at home. On top of that, since the client is at that time started as a different user, the UI is not visible.

What would be the best way to provide them with the OpenVPN client, without giving them more privileges?

share|improve this question
    
+1 for downgrading your parents to regular users :) –  powerMicha Apr 3 '13 at 13:38
add comment

3 Answers 3

up vote 2 down vote accepted

OpenVPN can be run as a service which can either be run automatically at startup or you can give certain users permissions to control the service. Below is a link to an article describing this configuration:

HowTo Run OpenVPN as a non-admin user in Windows

Also see the install notes on running OpenVPN as a service to see some limitations.

share|improve this answer
add comment

If you log in as an admin, right click on the OpenVPN shortcut, and select Properties you should be able to go to the Compatibility tab and change the settings for all users (Run As Administrator). I'm not 100% sure if this will work for a limited user, I'll try to test later today.

share|improve this answer
    
Can't test right now, but I believe that they will be asked for an Adiministrator password at that moment, which is what I want to avoid. –  Tom Ribbens Nov 13 '12 at 20:31
add comment

I have found there is another way to provide users with the ability to start OpenVPN without granting them full admin privileges. To achieve this you can use mmc with the Local Users and Groups snap-in and add a specific user to the Network Configuration Operators group. This provides the said user with the ability to change the routing table (which is critical to VPN) but does not escalate privileges beyond network configuration (e.g. they cannot install software, modify the registry, etc.). To launch OpenVPN the user has to right-click the OpenVPN icon and select Run as administrator, then they need to provide their password.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.