Hello Heiko, HH> The openvpn.exe process security descriptor will be owned by the user the HH> service is run as, i.e. Local System.
Ok. I was unsure if the openvpn.exe is started as user x it will be the owner, even if it's started from the service. HH> That's what I meant by "The service HH> account will own the process object, so that the user cannot sneak his way in HH> by modifying the DACL." I see. I'm looking forward to see the next version :-) greetings Carsten