locked
CMAK Profile Requires UAC Prompt RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I am looking at distributing a CMAK profile that users can use to hop on to a VPN connection, the issue is, that as it includes a static route, when you connect, you have to elevate privileges to add said route (via cmroute.dll), which users cannot do, because they don't have the necessary rights.

    Are there any options that get around this? the Application Compatability Toolkit suppresses the UAC prompts... but only if you are capable of doing it normally. Adding and connecting to the profile as an elevated user, making it available to "all users" still throws the UAC prompt on connection.

    Can clients get the route from the RRAS host on connection?


    Setup:

    1x 2008R2 RRAS host w/ 1x nic. (192.168.105.100)
    Clients recieve IPs from a static pool in a different range. (192.168.200.0)

    Thursday, October 19, 2017 3:51 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    >>Can clients get the route from the RRAS host on connection?

    Unfortunately，they couldn't get the route form RRAS host.

    I suggest you add the static route to the clients'  routing table.

    You could write a script  pushing to clients by GPO.

    More information about adding route,  please refer to the following article:

    https://www.howtogeek.com/howto/windows/adding-a-tcpip-route-to-the-windows-routing-table/

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Best Regards,
    Frank

    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Friday, October 20, 2017 7:10 AM