2.7 alpha1 missing log directory write permission on Windows

[jernejs]

Describe the bug
OpenVPNService runs as NT SERVICE\OpenVPNService starting from v2.7. The log directory in %PROGRAMDATA%\OpenVPN\log does not have write permission for this user by default (tested both in upgrade and clean install case).

To Reproduce
Install OpenVPN 2.7 alpha1, put a profile in %PROGRAMFILES%\OpenVPN\config-auto and start OpenVPNService

Expected behavior
Log file for connection is created in %PROGRAMDATA%\OpenVPN\log

Version information (please complete the following information):

• OS: Windows 11 24H2
• OpenVPN version: 2.7 alpha1

Additional context
Manually adding NT SERVICE\OpenVPNService write permission to the Log directory allows OpenVPNService logs to be written.

[cron2]

This looks like fallout from the change to run the automatic service as "unprivileged user"... @lstipakov can you have a look?

[lstipakov]

Good catch. We changed the Log directory but forgot to specifically grant permissions. Will be fixed in alpha2, which will be out today.

[lstipakov]

Fixed in OpenVPN-2.7_alpha2-I001.