Page History

...

1. Download the Windows OpenVPN installer from: https://openvpn.net/index.php/open-source/downloads.html
2. Run the installer
   1. During the installation process, a second installer for the TAP/TUN driver will start. You also need to install this driver.
   2. When asked to select components of the OpenVPN installation, you do NOT need the easy-rsa component.
   3. You may also want to check, under Advanced, to not remember passwords.
   4. Whether or not to have the OpenVPN gui start at login is up to you.
3. If you wish to be able to run OpenVPN as a non-administrative user, please see the following page: http://openvpn.se/files/howto/openvpn-howto_run_openvpn_as_nonadmin.html:
   1. Add the user to the "Network Configuration Operators" group
      1. For Windows10, login as an administrative user.
      2. Right click the Start menu
      3. Choose "Computer Management"
      4. In the left tab, expand Computer Management, System Tools, Local Users and Groups, Groups
      5. In the right tab, double click "Network Configuration Operators"
      6. Click "Add"
      7. Type in the username or domain\username and click "OK"
      8. Again click "OK"
      9. The user will need to re-login if already login'ed to the computer
   2. Because the CNF OpenVPN server requires DUO two factor authentication, you cannot 
   3. Download and install the "subinacl" tool from microsoft.com
   4. Start an administrative command prompt

   5. Run (filling in the non-administrative username or DOMAIN\username for "[username]" below) -- example is for 64-bit Windows:

      cd "C:\Program Files (x86)\Windows Resource Kits\Tools

      subinacl /SERVICE "OpenVPNService" /GRANT=[username]=TO

4. Obtain config files and keys for your netid from CNF Computing. Store those in a folder someplace (eg on your desktop).

...