Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I installed openvpn client for restricted active directory test user. VPN connection is OK, but routes can't be added. Therefore, I have added a test user to "network configuration operators" group and everything worked, but it's not an option.

I need to find right policy for restricted users can change routing table only?
System: Windows Server 2008R2


OpenVPN Client 2.2.2 Guest Os: Windows 7 professional.


I am using non commercial open source openvpn 2.2.2 package which I got from

Problem is that openvpn.exe trying to add a route to redirect all internet traffic to the vpn gateway. This ordinary user has no rights to add a route. If the user rightclik and say "run as administrator", route can be added. However in enterprise network, ordinary users will not have admin rights. How can commercial openvpn server do this without admin rights? Do you know any API call etc add such a route without admin rights? Note: If I add the user to "network administrators" groups, it works. However this is not acceptable because the user can also able to change IP address of the PC.

share|improve this question
I don't understand what you're trying to do/why you'd want users to change the routing tables on a server for VPN access. Could you try to clarify that, please? – HopelessN00b Dec 27 '12 at 14:34
What OpenVPN client are you using? There are a bunch of different ones and all behave differently. – MDMarra Dec 27 '12 at 14:37
@HopelessN00b Not on a server. On a client. Using Openvpn 2.2.2 client – hakand Dec 27 '12 at 14:39
Hm, I don't remember ever hitting this problem when deploying the OpenVPN_AS package with the bundled client to Windows 7 users. Did you install the client as an administrator, and are you using L2 or L3 mode? – MDMarra Dec 27 '12 at 14:51
I'm talking about L2 or L3 mode on the OpenVPN server. Are you configuring routes for each client (or a route for a group of clients) that will automatically get added to the policy file that the clients install? – MDMarra Dec 27 '12 at 15:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.