XPost: alt.comp.os.windows-10, alt.comp.os.windows-11, alt.comp.   
   icrosoft.windows   
   From: jj4public@outlook.com   
      
   On Sat, 24 Aug 2024 19:58:01 -0000 (UTC), Andrew wrote:   
   > ...   
   >  And where the program is set to the openvpn daemon C:\pathto\openvpn.exe   
   >  And where arguments are set to any one particular VPN configuration file   
   >  C:\pathto\vpngate_1.250.96.236_udp_1195.ovpn   
   >  Which never worked so I changed it to program "%comspec%" and arguments   
   >  /c start "" c:\pathto\openvpn.exe C:\pathto\vpngate_1.250.96.   
   36_udp_1195.ovpn   
   >  Which still never worked because it has to be done for thousands of files.   
      
   How exactly that it "doesn't work"? Any error message? What are you   
   expecting, and what are the actual result?   
      
   > But I set up all those task failures long ago, where probably I should try   
   > anew now that I have a better batch script which chooses the configs using   
   >  set cmd=C:pathto\openvpn.exe   
   >  set dir=C:\users\whoami\vpn\   
   >  set file=vpngate_1.250.96.236_udp_1195.ovpn   
   >  REM %cmd% %dir%%file%   
   >  runas.exe /user:administrator /savecred "%cmd% %dir%%file%"   
   >   
   > Knowing the setup for the task scheduler, do you have any suggestions   
   > for how to run the batch file such that the openvpn.exe GUI has elevated   
   > privileges when it tries to change the routing table with route.exe?   
      
   openvpn.exe doesn't have any GUI. It's a pure console program. Were you   
   referring to the GUI of openvpn-gui.exe? FYI, openvpn-gui.exe has a   
   different set of command line usage and arguments.   
      
   > But I have never gotten the Windows task scheduler to work with openvpn.   
   >   
   > Do you think it's even possible given openvpn.exe has to itself be able to   
   > modify the route (which I presume it does by calling route.exe internally)?   
      
   It normally shouldn't be a problem as long as openvpn already have   
   administrative rights, since by system default, a child process inherits the   
   user account and the security access level of the parent process. This does   
   not apply if the execution is (specifically) delegated to the desktop   
   process - which doesn't have administrative rights by default.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)