Astaro Open VPN failed startup on workstation unlock and allowing OpenVpn Without UAC

Description: When open vpn client is installed on a workstation, it adds itself to the start-up menu automatically. This results in a UAC popup on Windows start-up. Also, the vpn client disappears when a workstation gets locked or when a workstation goes into idle mode.

Solution:

1.       Disable the existing start-up item. This can be done from the registry.

2.       Open regedit.exe

3.       HKEY_LOCAL_MACHINE -> SOFTWARE -> Wow6432Node -> Microsoft -> Windows -> CurrentVersion -> Run

4.       On the right hand side, you can find the entry for openvpn-gui. Modify the value of the same or delete it.

5.       Now, start the task scheduler -> Task Scheduler Library -> Create a new task.

Step 1: Create the a new task.

Step 2: Create the two triggers for two main events - User Logon and Workstation Unlock

 Step 3: Define an action. To fire the openvpn-gui.exe
 Computer -> Program Files (X86) -> Astaro -> Astaro SSL VPN Client -> bin -> openvpn-gui.exe

 Step 4: Define the special conditions.

Step 5: Modify the settings to ensure that there is only one instace of openvpn-gui running at a time.

Astaro Open VPN Client not able to establish a connection / not able to add routes.

Description: Open VPN client starts up properly but fails to establish a tunnel between the two ends. When we have a look at the log files, we can find that the VPN is connected but fails to add routes due to lack of appropriate privileges.  

Solution:

1.       Make sure you have logged in as an administrator / you have administrative privileges on the workstation.

2.       Navigate to the openvpn-gui.exe. The usual path for the same is:

C:\Program Files (x86)\Astaro\Astaro SSL VPN Client\bin\openvpn-gui.exe

3.       Right click on the same and open properties -> compatibility

Check the routes in the local routing table by issuing the "route print" command in cmd.

This displays the local routing table and you should be able to see the routes for the internal network being added successfully.