Recommended Posts

Hi guys. I got a quick question for anyone that has more experience with openvpn. I'm trying to have the damn thing run at startup and I used the "scheduled task" method to do it. It runs fine, but my problem is that there's no tray icon. Without it, if something is wrong with the network connection, there's no way to reconnect the vpn, unless the user ends the task/process and open the gui manually. And that is another problem, because the logged in user does not have admin privileges. 

 

I've set a delay of 2 minutes in the Triggers section of the task, to let everything else load first, but the tray icon still doesn't show. 

 

Is there anything else I can do?

 

Thank you!

Link to comment
https://www.neowin.net/forum/topic/1288614-openvpn-gui-issue-at-startup/
Share on other sites

why not just put it in the startup folder instead of running it as a scheduled task?  This way when the user logs on it will run and it will be interactive with the user.   You can even do it in the all users section so that it applies to anyone who logs in, not just the individual user.

  On 11/02/2016 at 21:32, sc302 said:

why not just put it in the startup folder instead of running it as a scheduled task?  This way when the user logs on it will run and it will be interactive with the user.   You can even do it in the all users section so that it applies to anyone who logs in, not just the individual user.

Expand  

I already tried that, it does run BUT it asks for the admin password and I don't want that, since the user doesn't have the rights.

  On 11/02/2016 at 22:27, BudMan said:

do your users have admin rights?? 

 

If not is this the way you set it up?

https://community.openvpn.net/openvpn/wiki/Nonprivileged

 

This starts the gui for the user..

Expand  

As I said, the user doesn't have admin rights. I used the method here: https://help.my-private-network.co.uk/support/solutions/articles/8464-windows-openvpn-auto-start

  On 11/02/2016 at 21:20, John Teacake said:

Why are you trying to run it as a Scheduled Task? Presumably there would be no icon as its not running as the logged in user. 

Expand  

Because there's no other way other than the openvpn windows service set to automatic, but that method still doesn't show the tray icon...

That method is missing quite a bit... Take a look at the article I posted..

 

Also you can give the vpn service start stop permissions to normal user...  Been a coons age since I have done anything like this but I know you can grant non users rights to start and stop service with
 subinacl, there use to be a way to change the gui via a reg key so that it started and stopped the service..

 

Google is your friend, found the old article

http://openvpn.se/files/howto/openvpn-howto_run_openvpn_as_nonadmin.html

 

That goes over the way to change the service and the reg keys... Have not had to do this in years.. But might still work, if I get a chance latter I will test it..  Also int he article I linked to it links to 2 other gui options that can be used without admin rights.  Maybe either of those would suit your needs??  So you don't have to use the scheduled task method at all.

  On 11/02/2016 at 22:50, BudMan said:

That method is missing quite a bit... Take a look at the article I posted..

 

Also you can give the vpn service start stop permissions to normal user...  Been a coons age since I have done anything like this but I know you can grant non users rights to start and stop service with
 subinacl, there use to be a way to change the gui via a reg key so that it started and stopped the service..

 

Google is your friend, found the old article

http://openvpn.se/files/howto/openvpn-howto_run_openvpn_as_nonadmin.html

 

That goes over the way to change the service and the reg keys... Have not had to do this in years.. But might still work, if I get a chance latter I will test it..  Also int he article I linked to it links to 2 other gui options that can be used without admin rights.  Maybe either of those would suit your needs??  So you don't have to use the scheduled task method at all.

Expand  

I think you're missing the point (but please correct me if I'm wrong). The issue is NOT that a normal user cannot run openvpn, it's the tray icon that's missing. The connection runs fine as a scheduled task, with admin rights (the .exe is in the processes list in task manager), but my concern is that if the internet connection drops the vpn will not reconnect automatically. So the user needs to have a manual way of reconnecting, via the tray icon, since re-opening the main exe file requires admin password.

 

That script + scheduled task method you posted basically does the same thing, the app runs but there's no icon. Maybe I should add an explorer restart, so that the tray icon gets registered properly?

If you read the article I Linked too it gives them the gui so they can restart the connection.  Or the other guis in the article do not have to have admin rights and they can restart the connection.  They have a GUI!!

 

That is your whole point right - if the connection dies the users can't restart it... That is what I am showing you how to do - the article gives you the gui to see if the connection is up down, restart it, etc..  Same goes with the replacement guis that do not require admin.

 

"the app runs but there's no icon"

There is a icon!!! 

 

This automatically created task will put the user in the group "Network Configuration Operators" and then start OpenVPN GUI automatically at the next logon of this (non privileged) user (with highest privileges).

 

"win7x64_user1_openvpn will then execute openvpn-gui.exe in the users context but with highest privileges."

 

Since the user task win7x64_user1_openvpn was present at logon, it get's executed and starts openvpn-gui.exe. So after the user logged in, he/she has the OpenVPN-GUI running in the system tray and is ready to establish connections without administrative privileges"

 

Clearly you did NOT read it???

 

 

  On 11/02/2016 at 22:31, TDT said:

I already tried that, it does run BUT it asks for the admin password and I don't want that, since the user doesn't have the rights.

Expand  

then use proc mon to find out what is being called and give the user admin rights over those areas either in the registry or the file location.  If the file location is in program files move the folder or install it to the root of c or a folder outside of one of the restricted folders (windows, program files, or programdata).  This is how I have made programs that normally need admin access accessible to end users without admin access.  I could remote in with teamviewer and help you with a test box if you would like me to show you what to do...I will probably need a break at some point today while watching airwatch videos (blech). 

 

https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx

 

  On 12/02/2016 at 09:47, BudMan said:

If you read the article I Linked too it gives them the gui so they can restart the connection.  Or the other guis in the article do not have to have admin rights and they can restart the connection.  They have a GUI!!

 

That is your whole point right - if the connection dies the users can't restart it... That is what I am showing you how to do - the article gives you the gui to see if the connection is up down, restart it, etc..  Same goes with the replacement guis that do not require admin.

 

"the app runs but there's no icon"

There is a icon!!! 

 

This automatically created task will put the user in the group "Network Configuration Operators" and then start OpenVPN GUI automatically at the next logon of this (non privileged) user (with highest privileges).

 

"win7x64_user1_openvpn will then execute openvpn-gui.exe in the users context but with highest privileges."

 

Since the user task win7x64_user1_openvpn was present at logon, it get's executed and starts openvpn-gui.exe. So after the user logged in, he/she has the OpenVPN-GUI running in the system tray and is ready to establish connections without administrative privileges"

 

Clearly you did NOT read it???

 

 

Expand  

I did read it and tried, but it didn't work then, I think I missed a step or something. I tried again today and it does indeed work as expected, but there's still a minor issue (I really don't care about it, just mentioning): the tray icon is always green, even if the vpn gets disconnected. 

Anyway, thanks! This is a much better solution than the others that I found so far. :)

  • 5 months later...
  On 12/02/2016 at 09:47, BudMan said:

If you read the article I Linked too it gives them the gui so they can restart the connection.  Or the other guis in the article do not have to have admin rights and they can restart the connection.  They have a GUI!!

 

That is your whole point right - if the connection dies the users can't restart it... That is what I am showing you how to do - the article gives you the gui to see if the connection is up down, restart it, etc..  Same goes with the replacement guis that do not require admin.

 

"the app runs but there's no icon"

There is a icon!!! 

 

This automatically created task will put the user in the group "Network Configuration Operators" and then start OpenVPN GUI automatically at the next logon of this (non privileged) user (with highest privileges).

 

"win7x64_user1_openvpn will then execute openvpn-gui.exe in the users context but with highest privileges."

 

Since the user task win7x64_user1_openvpn was present at logon, it get's executed and starts openvpn-gui.exe. So after the user logged in, he/she has the OpenVPN-GUI running in the system tray and is ready to establish connections without administrative privileges"

 

Clearly you did NOT read it???

 

 

Expand  

thanks for the tip this might be just what im looking for, one question, in the article it mentions accessing a "hidden" menu. I fixed the value in the registry but I don’t know where to look for it, nothing has SEEMED to change. If you have any advice it would be much appreciated

 

- I'm running Windows 10 and am also having trouble with the system tray icon showing up

  On 20/07/2016 at 11:21, BudMan said:

I have not tested this with windows 10. 

Expand  

Thanks for fast reply. I have Win 7 computers as well and i wanted to see this. I changed the value but I am unsure where the extra menu pops up. i.e. do I right click the GUI or maybe the system tray icon? Thanks.

 

"If you are running as administrator, and just want a convenient way to control the OpenVPN Service, you can enable a hidden menu for this."

 

You enable this by setting the following registry value to "1":  HKEY_LOCAL_MACHINE\SOFTWARE\OpenVPN-GUI\allow_service

 

I changed the value but I am unsure where the extra menu pops up. i.e. do I right click the GUI or maybe the system tray icon? Thanks.

 

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Interesting for sure, I'd like to see 3rd party benchmarks in due time. I just hope Intel can do more in the dGPU space as well.
    • Not going to connect my PC to MS just for a few months extra support,
    • Microsoft Weekly: Windows 11 version 25H2 is official, free updates for Windows 10, and more by Taras Buria This week's news recap is here, and it is full of interesting and important stories. We have Windows 11 version 25H2 announcement, free extended security updates for Windows 10, redesigned BSOD, non-security updates with new features, and more. Quick links: Windows 10 and 11 Windows Insider Program Updates are available Reviews are in Gaming news Great deals to check Windows 11 and Windows 10 Here, we talk about everything happening around Microsoft's latest operating system in the Stable channel and preview builds: new features, removed features, controversies, bugs, interesting findings, and more. And, of course, you may find a word or two about older versions. The biggest Windows story of this week was undoubtedly the launch of the Extended Security Update program for Windows 10, which will soon be out of support (governments are now issuing warnings to Windows 10 users). What is interesting is that Microsoft is giving away free security updates—all users need to do is back up their PCs with the Windows Backup tool. Other options include paying with 1,000 Microsoft Rewards points or $30, so pick your poison. If you are thinking about staying on Windows 10, perhaps this article will convince you to switch. Microsoft published a few reasons why Windows 11 is a better choice than the outgoing Windows 10. Another post compares the performance of the two operating systems in another attempt to make you ditch Windows 10. There is also a new ESU guide for office PCs that do not support Windows 11. Another major story is about the Blue Screen of Death, which will soon become the Black Screen of Death and lose its iconic smiley face. Microsoft revealed that the redesign is coming later this summer, alongside Quick Machine Recovery. This new tool can fix PCs that cannot boot due to outages, malware, or other software nastiness. We are not done with big news just yet. Microsoft confirmed that Windows 11 version 25H2 is coming later this year. This year's feature update is coming soon, and the first officially marked preview builds are now available for testing. Microsoft also released the June 2025 non-security updates for Windows 10 and 11 users. It all started with Windows 10, which received KB5061087 with build number 19045.6036. Windows 11 version 24H2 received KB5060829, and Windows 11 versions 22H2 and 23H2 received KB5060826. Also, Windows 11 received a new configuration update to resolve the stuck Windows Update (and new setup updates), Windows Server 2025 got a new security baseline, and the Media Creation Tool now downloads the latest Windows 11 images with the June 2025 Patch Tuesday fixes. Another important story is about Secure Boot, one of Windows 11's hardware requirements. Microsoft published a lengthy blog post warning that its first certificates will soon expire, and users should prepare to update them if they want their PCs to be secure and compatible with third-party apps going forward. No week goes by without some Windows issues. This time, Dell acknowledged a problem with Night Light on certain Windows on ARM PCs. The bug breaks Night Light on the secondary display, but Dell says you should blame Qualcomm and its Oryon chipset. Microsoft, on the other hand, confirmed more issues with Chrome on Windows. This week's Windows trivia includes an interesting story from Microsoft veteran Raymond Chen. He published a new blog post where he recalled how PC manufacturers used to trick BIOS copyright strings to get full editions of trial versions of various apps. To finish this week's Windows section, here is a small tip for those who want to make Windows 11 feel a little snappier. A hidden accessibility feature can make the user interface much more responsive and fast, so check it out here. Windows Insider Program Here is what Microsoft released for Windows Insiders this week: Builds Canary Channel Nothing in Canary this week Dev Channel Build 26200.5661 This build introduced a new home page for Recall, a single place where you can access your recent snapshots, recommended documents, and other useful information. The update also lets you change where system indicators appear on the screen. Build 26200.5670 This build introduces 1Password integration for Passkeys, Settings improvements, version 25H2 marking, and more. It also fixes the Windows Vista startup sound after the previously failed attempt. Beta Channel Build 26120.4452 This is the same build as 26120.4452 Build 26120.4520 This build is the same as 26200.5670 from the Dev Channel, minus the version 25H2 part. Release Preview Channel Nothing in Release Preview this week Additionally, Microsoft released new screen-recording capabilities for the Snipping Tool app for more Windows Insiders (Beta and Release Preview). Updates are available This section covers software, firmware, and other notable updates (released and coming soon) delivering new features, security fixes, improvements, patches, and more from Microsoft and third parties. This week's browser updates include some major releases and plenty of Firefox updates. Mozilla released Firefox 140 with custom search engine support, a new ESR release, and more changes. Shortly after, it released version 140.0.1 with fixes for dark theme issues and crashes and version 140.0.2 with fixes for crashes on certain Windows devices. Microsoft released Edge 138 with AI-powered history search and a warning for IT admins, and Google released Chrome 138. Office updates include the new Outlook for Windows coming to Microsoft 365 Education in early next year. Speaking of the new Outlook, Microsoft also published a story that explained why the app is actually great and why haters are wrong. Oh, Microsoft... Teams is getting a new health dashboard feature, PowerPoint can generate presentations from PDFs or text files, and Modern Page Templates are coming to SharePoint. Microsoft also published detailed guides about fixing Office 2024 activation issues. Finally, here is this week's recap of the new features coming soon to the Microsoft 365 productivity suite and a recap of everything new in Excel in June 2025. Here are other updates and releases you may find interesting: Microsoft announced Mu, an on-device small language model for Windows 11. The Comet AI browser is coming to Windows, now in private beta. Discord for Windows on ARM is now in development. Surface Copilot+ PCs are coming to classrooms on July 22. Raycast for Windows is now in closed beta; here is the first look. Visual Studio is now even smarter, thanks to more AI models and billing updates. France's third-largest city is ditching Windows and Office in favor of Linux and FOSS. Here are five things that people want in Microsoft Teams. Here are the latest drivers and firmware updates released this week: Intel 32.0.101.6913 WHQL graphics driver with Mecha BREAK support and more. Reviews are in Here is the hardware and software we reviewed this week Steven Parker reviewed the TerraMaster F4 SSD, an extremely lightweight and quiet all-SSD NAS with some good connectivity, a decent price tag, and good design. It is not flawless, but it still managed to score 8.5 out of 10 on Steven's NAS scale. Robbie Khan reviewed the Keychron Lemokey G2 8K Wireless mouse. It is lightweight, has onboard memory, supports Keychron Launcher, and includes a good cable and an adapter. However, with an 8/10 rating at Robbie's scale, it has some cons that you should consider before buying. On the gaming side Learn about upcoming game releases, Xbox rumors, new hardware, software updates, freebies, deals, discounts, and more. Microsoft finally announced the long-rumored Xbox app launcher for Windows PCs and handhelds. The Xbox app will soon work as a single place for all your games, regardless of their origin, be it Steam, Epic Games Store, Origin, or something else. As of right now, the updated app is being tested in the Xbox Insider Program. Also, Microsoft announced the June 2025 update for Xbox, bringing users unsynced save management, the ability to browse games by publishers, the option to hide system apps on the Dashboard on Xbox consoles, and more. Microsoft finally has its official Xbox-branded VR helmet. However, it is not an entirely Xbox VR per se. It was made in collaboration with Meta, and its stocks are "extremely limited." Sadly, not all Xbox news was positive this week. A new report hit out of the blue, revealing Microsoft's plans to lay off a lot of workers in the Xbox division. Microsoft Flight Simulator received a new city update with upgraded visuals of New York, New Jersey, Massachusetts, and other parts of the state to give you a more realistic experience when flying the sim. City Update 11 is now available on consoles and PCs. Deals and freebies The Epic Games Store is giving away Sable, an interesting-looking exploration game with an open world and a unique art style. If that is not enough, be sure to check out the Steam Summer Sale 2025, which is now in full swing, offering gamers a horde of discounts on various games. More deals are available in this week's edition of Weekend PC Game Deals. Other gaming news includes the following: Senua's Saga: Hellblade II is getting 60 FPS mode, dev commentary, and more. DayZ is getting a desert map with the new Badlands expansion, set to be its biggest yet. Great deals to check Every week, we cover many deals on different hardware and software. The following discounts are still available, so check them out. You might find something you want or need. ASUS NUC 14 Pro+ Core Ultra 9 185H, 32GB RAM, 1TB SSD - $799.99 | 27% off 75" Hisense U7 Series Google Smart TV - $799.99 | 11% off Sony BRAVIA Theater System 6 - $668 | 13% off 6TB WD Blue PC Internal HDD - $99.99 | 17% off 14TB WD Elements Desktop External HDD - $199.99 | 31% off Corsair iCUE 4000D RGB Airflow Mid-Tower Case - $89.99 | 40% off Samsung Galaxy S25+ 512GB - $899 | 20% off This link will take you to other issues of the Microsoft Weekly series. You can also support Neowin by registering a free member account or subscribing for extra member benefits, along with an ad-free tier option. Microsoft Weekly image background by jhenning on Pixabay
    • UniGetUI 3.2.1 Beta 2 by Razvan Serea UniGetUI is an application whose main goal is to create an intuitive GUI for the most common CLI package managers for Windows 10 and Windows 11, such as Winget, Scoop and Chocolatey. With UniGetUI, you'll be able to download, install, update and uninstall any software that's published on the supported package managers — and so much more. UniGetUI features Install, update and remove software from your system easily at one click: UniGetUI combines the packages from the most used package managers for windows: WinGet, Chocolatey, Scoop, Pip, Npm and .NET Tool. Discover new packages and filter them to easily find the package you want. View detailed metadata about any package before installing it. Get the direct download URL or the name of the publisher, as well as the size of the download. Easily bulk-install, update or uninstall multiple packages at once selecting multiple packages before performing an operation Automatically update packages, or be notified when updates become available. Skip versions or completely ignore updates in a per-package basis. Manage your available updates at the touch of a button from the Widgets pane or from Dev Home pane with UniGetUI Widgets. The system tray icon will also show the available updates and installed package, to efficiently update a program or remove a package from your system. Easily customize how and where packages are installed. Select different installation options and switches for each package. Install an older version or force to install a 32bit architecture. [But don't worry, those options will be saved for future updates for this package] Share packages with your friends to show them off that program you found. Here is an example: Hey @friend, Check out this program! Export custom lists of packages to then import them to another machine and install those packages with previously-specified, custom installation parameters. Setting up machines or configuring a specific software setup has never been easier. Backup your packages to a local file to easily recover your setup in a matter of seconds when migrating to a new machine UniGetUI 3.2.1 Beta 2 changelog: Elevator command generation has been improved to Not throw NullReference Exceptions Be less vulnerable to command injection Icons from the database can now target a custom package (via id=ManagerName.ExactPackageId) Scoop will use PowerShell7 when possible Fix a crash related to UniGetUI Elevator finding Fixed issues with downloading package installers Fixed issues with PowerShell7 package uninstallation New signing certificate Other minor changes and improvements Download: UniGetUI 3.2.1 Beta 2 | 52.2 MB (Open Source) Links: WingetUI Home Page | GitHub | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • LG G3 is still one of the best phones I’ve ever owned
  • Recent Achievements

    • Week One Done
      Hartej earned a badge
      Week One Done
    • One Year In
      TsunadeMama earned a badge
      One Year In
    • Week One Done
      shaheen earned a badge
      Week One Done
    • Dedicated
      Cole Multipass earned a badge
      Dedicated
    • Week One Done
      Alexander 001 earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      551
    2. 2
      +FloatingFatMan
      182
    3. 3
      ATLien_0
      169
    4. 4
      Skyfrog
      108
    5. 5
      Som
      106
  • Tell a friend

    Love Neowin? Tell a friend!