Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

my windows vista vpn client interface receives an ip in:
and the server pushes a route to the local lan

In my windows vista (client) the user account does not have admin privileges and as a consequence the pushed route do not have effect.

A solution I think that would solve the problem is in the openvpn server is using TAP and do a bridge with the lan interface.

is there any other option?

share|improve this question
This works equally well for Windows 7 (64bit). Maybe we can have the question's title changed to reflect that? – Paul Jul 8 '10 at 15:37
up vote 0 down vote accepted

Give the user(s) "network operator" privs, this will allow the pushed route to work, but doesn't confer too much extra "power" :)

As far as I know, there's work being done to allow openvpn to run as a priviledged service, which should solve these issues. Not sure where that's got to. See this link also

share|improve this answer
How can I give "network operator" privileges? – askmehow Sep 6 '09 at 16:54
I believe he is suggesting you add the user to the 'Network Configuration Operators" local group. – Zoredache Sep 6 '09 at 18:28
That's exactly what I meant - apologies for the lack of clarity. – Tom Newton Sep 7 '09 at 8:57
I just checked in this windows vista Home (PT) Portuguese version, this group does not exist as a local group. Checked using the 'NET LOCALGROUP' from the command line. I have upgrade the user permissions for this, or change the operative system to professional version. Thank you guys. – askmehow Sep 7 '09 at 14:51
Have added a URL to my post which details some further methods. I did presume you would be using XP Pro though. – Tom Newton Sep 7 '09 at 15:58

I did a different thing now.

I connected the server to the vpn network using the open vpn client as a service and now there is need to push this route because its virtual network adapter connects do the vpn and the clients can "talk" to each other.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.