Hello Heiko,

HH> The openvpn.exe process security descriptor will be owned by the user the
HH> service is run as, i.e. Local System.

Ok. I was unsure if the openvpn.exe is started as user x it will be the
owner, even if it's started from the service.

HH>  That's what I meant by "The service
HH> account will own the process object, so that the user cannot sneak his way 
in
HH> by modifying the DACL."

I see.

I'm looking forward to see the next version :-)

greetings
Carsten




Reply via email to