OpenVPN Connect – Import Profile Process (Windows)

Overview

This guide explains the OpenVPN Connect profile import process for Windows. This process is managed through Microsoft Intune, which deploys a configuration profile set up by the network team. It includes various settings along with adding the URL to our vpn host: https://cwru.openvpn.com

Step 1: Intune Check-In & Payload Delivery

When the computer checks in with Intune, Intune will detect and attempt to run the application. The application will deliver two payloads to C:\ProgramData\CWRU:

  • openvpn-win.ocfg – The OpenVPN configuration profile
  • CWRU_OpenVPN_Imported.ps1 – The PowerShell script

Uploaded Image (Thumbnail)

Step 2: PowerShell Script Execution

Once the payloads are delivered, the application will run the PowerShell script, which performs three actions:

1. Registry Entry Creation

A registry entry is created to flag that the script needs to run upon the user's first logon.

Uploaded Image (Thumbnail)

2. Profile Import

The script imports the OpenVPN configuration profile (openvpn-win.ocfg) into the user's OpenVPN Connect program.

3. Logging & Flag Stamping

The script writes two files to the user's local AppData folder:

  • CWRU_OpenVPN_Imported.flag – A flag file that prevents the script from running again on subsequent logons.
  • CWRU_OpenVPN_Log.txt – A log file that records the process and indicates whether it completed successfully.

Uploaded Image (Thumbnail)

Troubleshooting

If you are experiencing issues with the import process, please refer to the log file (CWRU_OpenVPN_Log.txt) for details on what occurred and how to resolve it.

When submitting a ticket to Endpoint Management, please attach:

  • 📄 The CWRU_OpenVPN_Log.txt log file
  • 🖼️ A screenshot of the flag file

To re-run the import process: Simply delete the flag file (CWRU_OpenVPN_Imported.flag) and have the user log off and back on.

⚠️ Important Notes

  • The import process takes approximately 30 seconds to run after the user logs in. This is expected behavior, as the program needs time to initialize and Windows requires a moment to load.
  • If the OpenVPN Connect program is already open when the import runs, the import will still complete successfully. However, a pop-up prompt will appear asking to import the profile.
  • If a user is actively connected to the VPN, the pop-up will appear once they disconnect.

Below is a screenshot of what the import prompt looks like:

Uploaded Image (Thumbnail)

Print Article