#17 Administrative Rights are required for Vista onwards
It would be great if OpenVpnGui supports User Account Control Features of Microsoft Windows .
Problem:
If the user is not running the process as Administrator, then OpenVpnGui will not run with administrator privileges and so, the underlying openvpn also will not run with administrator privileges. This will make sure that OpenVpnGui will run and will show as it is successfully connected, but in reality if we take the logs we can see that the route addition has failed.
-----------------------------------------------------
Fri Sep 09 13:00:36 2011 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=29]
Fri Sep 09 13:00:36 2011 Route addition via IPAPI failed [adaptive]
Fri Sep 09 13:00:36 2011 Route addition fallback to route.exe
The requested operation requires elevation.
Fri Sep 09 13:00:37 2011 ERROR: Windows route add command failed [adaptive]: returned error code 1
----------------------------------------------------------
One Possible Solution:
We can create a manifest file and add it to the openVpnGui executable with the Microsoft Manifest Tool (mt.exe).
Here we can actually force the users to run it with administrative rights as a pop up will come asking to give the process administrative rights.
This would solve this issue.
I'm currently working on an interactive OpenVPN service to be integrated in mainline. The GUI will then be able to start OpenVPN through that service on demand. Establishing connections in Windows Vista and later should then be possible even with limited user accounts without UAC intervening.