OpenVPN GUI issue at startup

By TDT
in Smart Home, Network & Security

 Share

Recommended Posts

Veteran

TDT

Posted
Posted

Hi guys. I got a quick question for anyone that has more experience with openvpn. I'm trying to have the damn thing run at startup and I used the "scheduled task" method to do it. It runs fine, but my problem is that there's no tray icon. Without it, if something is wrong with the network connection, there's no way to reconnect the vpn, unless the user ends the task/process and open the gui manually. And that is another problem, because the logged in user does not have admin privileges. 

 

I've set a delay of 2 minutes in the Triggers section of the task, to let everything else load first, but the tray icon still doesn't show. 

 

Is there anything else I can do?

 

Thank you!

Link to comment
https://www.neowin.net/forum/topic/1288614-openvpn-gui-issue-at-startup/
Share on other sites
Grand Master

sc302 Veteran

Posted
  • Veteran
Posted

why not just put it in the startup folder instead of running it as a scheduled task?  This way when the user logs on it will run and it will be interactive with the user.   You can even do it in the all users section so that it applies to anyone who logs in, not just the individual user.

Veteran

TDT

Posted
  • Author
Posted
  On 11/02/2016 at 21:32, sc302 said:

why not just put it in the startup folder instead of running it as a scheduled task?  This way when the user logs on it will run and it will be interactive with the user.   You can even do it in the all users section so that it applies to anyone who logs in, not just the individual user.

Expand  

I already tried that, it does run BUT it asks for the admin password and I don't want that, since the user doesn't have the rights.

Veteran

TDT

Posted
  • Author
Posted
  On 11/02/2016 at 22:27, BudMan said:

do your users have admin rights?? 

 

If not is this the way you set it up?

https://community.openvpn.net/openvpn/wiki/Nonprivileged

 

This starts the gui for the user..

Expand  

As I said, the user doesn't have admin rights. I used the method here: https://help.my-private-network.co.uk/support/solutions/articles/8464-windows-openvpn-auto-start

Veteran

TDT

Posted
  • Author
Posted
  On 11/02/2016 at 21:20, John Teacake said:

Why are you trying to run it as a Scheduled Task? Presumably there would be no icon as its not running as the logged in user. 

Expand  

Because there's no other way other than the openvpn windows service set to automatic, but that method still doesn't show the tray icon...

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

That method is missing quite a bit... Take a look at the article I posted..

 

Also you can give the vpn service start stop permissions to normal user...  Been a coons age since I have done anything like this but I know you can grant non users rights to start and stop service with
 subinacl, there use to be a way to change the gui via a reg key so that it started and stopped the service..

 

Google is your friend, found the old article

http://openvpn.se/files/howto/openvpn-howto_run_openvpn_as_nonadmin.html

 

That goes over the way to change the service and the reg keys... Have not had to do this in years.. But might still work, if I get a chance latter I will test it..  Also int he article I linked to it links to 2 other gui options that can be used without admin rights.  Maybe either of those would suit your needs??  So you don't have to use the scheduled task method at all.

Veteran

TDT

Posted
  • Author
Posted
  On 11/02/2016 at 22:50, BudMan said:

That method is missing quite a bit... Take a look at the article I posted..

 

Also you can give the vpn service start stop permissions to normal user...  Been a coons age since I have done anything like this but I know you can grant non users rights to start and stop service with
 subinacl, there use to be a way to change the gui via a reg key so that it started and stopped the service..

 

Google is your friend, found the old article

http://openvpn.se/files/howto/openvpn-howto_run_openvpn_as_nonadmin.html

 

That goes over the way to change the service and the reg keys... Have not had to do this in years.. But might still work, if I get a chance latter I will test it..  Also int he article I linked to it links to 2 other gui options that can be used without admin rights.  Maybe either of those would suit your needs??  So you don't have to use the scheduled task method at all.

Expand  

I think you're missing the point (but please correct me if I'm wrong). The issue is NOT that a normal user cannot run openvpn, it's the tray icon that's missing. The connection runs fine as a scheduled task, with admin rights (the .exe is in the processes list in task manager), but my concern is that if the internet connection drops the vpn will not reconnect automatically. So the user needs to have a manual way of reconnecting, via the tray icon, since re-opening the main exe file requires admin password.

 

That script + scheduled task method you posted basically does the same thing, the app runs but there's no icon. Maybe I should add an explorer restart, so that the tray icon gets registered properly?

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

If you read the article I Linked too it gives them the gui so they can restart the connection.  Or the other guis in the article do not have to have admin rights and they can restart the connection.  They have a GUI!!

 

That is your whole point right - if the connection dies the users can't restart it... That is what I am showing you how to do - the article gives you the gui to see if the connection is up down, restart it, etc..  Same goes with the replacement guis that do not require admin.

 

"the app runs but there's no icon"

There is a icon!!! 

 

This automatically created task will put the user in the group "Network Configuration Operators" and then start OpenVPN GUI automatically at the next logon of this (non privileged) user (with highest privileges).

 

"win7x64_user1_openvpn will then execute openvpn-gui.exe in the users context but with highest privileges."

 

Since the user task win7x64_user1_openvpn was present at logon, it get's executed and starts openvpn-gui.exe. So after the user logged in, he/she has the OpenVPN-GUI running in the system tray and is ready to establish connections without administrative privileges"

 

Clearly you did NOT read it???

 

 

Grand Master

sc302 Veteran

Posted
  • Veteran
Posted
  On 11/02/2016 at 22:31, TDT said:

I already tried that, it does run BUT it asks for the admin password and I don't want that, since the user doesn't have the rights.

Expand  

then use proc mon to find out what is being called and give the user admin rights over those areas either in the registry or the file location.  If the file location is in program files move the folder or install it to the root of c or a folder outside of one of the restricted folders (windows, program files, or programdata).  This is how I have made programs that normally need admin access accessible to end users without admin access.  I could remote in with teamviewer and help you with a test box if you would like me to show you what to do...I will probably need a break at some point today while watching airwatch videos (blech). 

 

https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx

 

Veteran

TDT

Posted
  • Author
Posted
  On 12/02/2016 at 09:47, BudMan said:

If you read the article I Linked too it gives them the gui so they can restart the connection.  Or the other guis in the article do not have to have admin rights and they can restart the connection.  They have a GUI!!

 

That is your whole point right - if the connection dies the users can't restart it... That is what I am showing you how to do - the article gives you the gui to see if the connection is up down, restart it, etc..  Same goes with the replacement guis that do not require admin.

 

"the app runs but there's no icon"

There is a icon!!! 

 

This automatically created task will put the user in the group "Network Configuration Operators" and then start OpenVPN GUI automatically at the next logon of this (non privileged) user (with highest privileges).

 

"win7x64_user1_openvpn will then execute openvpn-gui.exe in the users context but with highest privileges."

 

Since the user task win7x64_user1_openvpn was present at logon, it get's executed and starts openvpn-gui.exe. So after the user logged in, he/she has the OpenVPN-GUI running in the system tray and is ready to establish connections without administrative privileges"

 

Clearly you did NOT read it???

 

 

Expand  

I did read it and tried, but it didn't work then, I think I missed a step or something. I tried again today and it does indeed work as expected, but there's still a minor issue (I really don't care about it, just mentioning): the tray icon is always green, even if the vpn gets disconnected. 

Anyway, thanks! This is a much better solution than the others that I found so far. :)

  • 5 months later...
Neowinian

mediumwhite

Posted
Posted
  On 12/02/2016 at 09:47, BudMan said:

If you read the article I Linked too it gives them the gui so they can restart the connection.  Or the other guis in the article do not have to have admin rights and they can restart the connection.  They have a GUI!!

 

That is your whole point right - if the connection dies the users can't restart it... That is what I am showing you how to do - the article gives you the gui to see if the connection is up down, restart it, etc..  Same goes with the replacement guis that do not require admin.

 

"the app runs but there's no icon"

There is a icon!!! 

 

This automatically created task will put the user in the group "Network Configuration Operators" and then start OpenVPN GUI automatically at the next logon of this (non privileged) user (with highest privileges).

 

"win7x64_user1_openvpn will then execute openvpn-gui.exe in the users context but with highest privileges."

 

Since the user task win7x64_user1_openvpn was present at logon, it get's executed and starts openvpn-gui.exe. So after the user logged in, he/she has the OpenVPN-GUI running in the system tray and is ready to establish connections without administrative privileges"

 

Clearly you did NOT read it???

 

 

Expand  

thanks for the tip this might be just what im looking for, one question, in the article it mentions accessing a "hidden" menu. I fixed the value in the registry but I don’t know where to look for it, nothing has SEEMED to change. If you have any advice it would be much appreciated

 

- I'm running Windows 10 and am also having trouble with the system tray icon showing up

Neowinian

mediumwhite

Posted
Posted
  On 20/07/2016 at 11:21, BudMan said:

I have not tested this with windows 10. 

Expand  

Thanks for fast reply. I have Win 7 computers as well and i wanted to see this. I changed the value but I am unsure where the extra menu pops up. i.e. do I right click the GUI or maybe the system tray icon? Thanks.

 

"If you are running as administrator, and just want a convenient way to control the OpenVPN Service, you can enable a hidden menu for this."

 

You enable this by setting the following registry value to "1":  HKEY_LOCAL_MACHINE\SOFTWARE\OpenVPN-GUI\allow_service

 

I changed the value but I am unsure where the extra menu pops up. i.e. do I right click the GUI or maybe the system tray icon? Thanks.

 

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Spotify Discover Weekly turns 10 with new controls for fine-tuning your music finds

      By Sekyal · Posted

      I enjoy using Discover Weekly. I have found new music using it. Just sometimes it goes off the rails and doesn't remember I don't like rap. I'm not sure this update is anything helpful, but I guess I'll try it if it comes to free accounts.
    • These airlines offer the fastest in-flight Wi-Fi

      By cleverclogs · Posted

      Yep, I got 250 mbps down / 50 mbps up on Qatar last week and about a 30 ms ping.
    • Here are all the new features added to Microsoft 365 Copilot in June 2025

      By Usama Jawad96 · Posted

      Here are all the new features added to Microsoft 365 Copilot in June 2025 by Usama Jawad Towards the end of each month, Microsoft publishes a roundup of the features that it added to some of its popular software in the previous four weeks. We have already talked about the new capabilities introduced in Excel and Teams during the month of June 2025, and now, it's time to talk about Microsoft 365 Copilot. We'll start off with admin-facing capabilities since there are only a few of them. For starters, the usage metrics for Copilot in the Copilot Analytics tool now have new prompt categories that give more insights as to how users are engaging with Copilot. This feature has just begun rolling out, but another enhancement to the usage metrics that is already available is dedicated statistics for intelligent meeting recaps. Finally, Microsoft 365 admins can now view and manage their inventory of agents and connectors and also have more granular control over costs and billing policies. On the user side of things, we have intelligent assistance in Copilot Chat, powered by ContextIQ. This layer of intelligence can scope prompts to internal (SharePoint, OneDrive) and external data sources, find files in the chat, and proactively offer relevant suggestions as you type. In the same vein, the Copilot mobile app is being updated so you can talk to the AI in a natural manner using your voice. In addition, users can also get access to deep reasoning agents such as Researcher and Analyst for more complex and research-oriented needs. The Create experience in the app is also being updated with the ability to generate stories and branded templates. Other interesting Copilot capabilities rolling out to Edge customers are the ability to prompt the AI through the search bar, access agents from within the browser, and take advantage of Copilot's impressive text summarization capabilities. That's not all though, other features in tow include: Enhancements to Copilot in Outlook: Schedule meetings through Copilot chat, summarization of email attachments, a new sidebar experience in the classic Outlook app, meeting preparation, and automated meeting invite creation Improved image generation and large file handling in Copilot Chat: More photorealistic image generation with better text depiction, ability to generate longer summaries from bigger files, and PDF scanning capabilities for insights Memory in Copilot: Copilot will now remember certain items from your conversation and you can modify or delete them Transferred calls summary with Copilot in Teams Phone: Generate a summary of a call and transfer it to a target New file extension for Copilot Pages: Copilot Pages will now have .page extension with an updated file icon Copilot Notebooks availability in OneNote: We already covered this in detail here Seamlessly add brand-approved images with Copilot in PowerPoint: Integration of Copilot with SharePoint Organization Asset Library (OAL) and Templafy asset libraries Explain formulas on the grid with Copilot in Excel: Self-explanatory, exactly what it says on the tin Expanded availability for the Microsoft 365 Copilot app: Availability of the Microsoft 365 Copilot app on Mac You can read more details about each of the aforementioned features here.
    • No more catfishing? Tinder is now requiring facial recognition in this US state

      By Good Bot, Bad Bot · Posted

      Damn, I blocked OldGuru a long time ago and you have to go and quote them so I have to read that creepy a$$ take. LOL Anyway 100% that dude can't find women that will have sex with him.
    • OneNote for Windows gets support for Dynamic DPI

      By Usama Jawad96 · Posted

      OneNote for Windows gets support for Dynamic DPI by Usama Jawad OneNote for Windows (part of Microsoft 365) is a pretty useful app if you're actively engaged in note-taking activities and also appreciate some rich text formatting capabilities. In fact, it also offers some decent integrations with Copilot, which make it an important piece of software in productivity-based environments. Now, Microsoft has introduced a feature that will likely make people with multi-monitor setups very happy. The OneNote for Windows application now supports Dynamic DPI (dots per inch). What this means is that you can use OneNote across any screen and it will scale according to the display's resolution, and you won't get a disconcerting and distracting blurring effect. You can extend your display to a high-resolution monitor and shift OneNote across displays without a hitch or any distraction. This is similar to the UX that is already present in Word, Excel, and PowerPoint. This Dynamic DPI support not only extends to the main text area but also to the section tabs, the Notebooks pane, drop-down menus, and Copilot Notebooks. All of these should look crisp and polished moving forward, without any manual adjustment or even an app restart required from the user's side. Microsoft has highlighted that it was encouraged to work on this capability after receiving user feedback from customers in this area. Dynamic DPI is now available to Current Channel (CC) customers on OneNote for Windows, running Version 2504 (Build 16.0.18827.20042) or later. That's not all, though. Another smaller enhancement present in OneNote moving forward is a revamped setup experience when you launch OneNote on a new Windows device for the first time. You will now receive a list of your five most recently used (MRU) notebooks that will open instantaneusly with a click. If you have more than five notebooks, you can pick and choose the files that you want to open. That said, Microsoft is looking to expand and improve on this experience in the future since it is fairly limited right now.

  • Recent Achievements

    • Week One Done
      dennis Nebeker earned a badge
      Week One Done
    • One Year In
      timothytoots earned a badge
      One Year In
    • One Month Later
      CHUNWEI earned a badge
      One Month Later
    • Week One Done
      TIGOSS earned a badge
      Week One Done
    • First Post
      henryj earned a badge
      First Post

  • Popular Contributors

    1. 1
      +primortal
      465
    2. 2
      +FloatingFatMan
      194
    3. 3
      ATLien_0
      163
    4. 4
      Xenon
      78
    5. 5
      Som
      73
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!