Deploy OpenVPN Clients to windows 7 users to run as admin

[Brian_D]

I have about 20 people I want to deploy OpenVPN to and was curious what would be the most efficient way, if users are already admins of their laptops, that after they install OpenVPN to have it start as admin. In testing I opened msconfig and turned openvpn startup off and then created a scheduled task to have it start as admin at logon. I would prefer not to touch each one to do this if possible so any help would be appreciated.

Thanks

[sky-knight]

The installer generally runs as admin by default, from there all the user has to do is exit OpenVPN GUI, then modify the OpenVPN GUI shortcut to run as admin, it's a tick box. From then on out OpenVPN GUI will run automatically when the user logs in, with admin rights, (pestering the user I'm afraid).

[Brian_D]

Sky-knight, thanks for the reply, from my tests the install creates a registry entry that points to program files\openvpn\bin\openvpn-gui.exe so I'm not sure what shortcut you refer to however I just realized that the tick box to run the executable as admin is under compatibility tab of properties vs a shortcut that is under advanced settings. Thanks

[sky-knight]

Yes the registry entry points at the EXE, but if you modify a shortcut to that EXE it will make it run as admin as well.

[Brian_D]

Really? So making the shortcut run as admin will make the .exe run as admin also even though the reg entry for startup points to the exe and not the shortcut? I didn't realize that, thanks!

[sky-knight]

Yes, at least I think so... You'll have to forgive me but I run most of this sort of thing on autopilot when I'm configuring things. You may need to set the comparability on the exe itself, but I don't remember having to do that.

[johnsonx42]

you actually modify the properties of the .exe itself to do what you want. In otherwords, right-click c:\program files\openvpn\bin\openvpn-gui.exe and select properties, and set it to Run as Administrator.

[WebFooL]

I have suggested this:

http://bugzilla.untangle.com/show_bug.cgi?id=10243#c7

Then it will be checkt by default but users will still be promted the uac question.