I installed openvpn client for restricted active directory test user. VPN connection is OK, but routes can't be added. Therefore, I have added a test user to "network configuration operators" group and everything worked, but it's not an option.
I need to find right policy for restricted users can change routing table only?
System: Windows Server 2008R2
OpenVPN Client 2.2.2 Guest Os: Windows 7 professional.
I am using non commercial open source openvpn 2.2.2 package which I got from http://openvpn.net/index.php/download/community-downloads.html
Problem is that openvpn.exe trying to add a route to redirect all internet traffic to the vpn gateway. This ordinary user has no rights to add a route. If the user rightclik and say "run as administrator", route can be added. However in enterprise network, ordinary users will not have admin rights. How can commercial openvpn server do this without admin rights? Do you know any API call etc add such a route without admin rights? Note: If I add the user to "network administrators" groups, it works. However this is not acceptable because the user can also able to change IP address of the PC.