Your IP:

Our Forums Have Moved!

Visit our new forums at to post on topics and read the latest content. These forums are now read-only archives.

K-12 Forums

Talk with other K-12 network administrators in your state.

Or see all states.


Vanilla 1.1.4 is a product of Lussumo. More Information: Documentation, Community Support.

This discussion has been inactive for longer than 30 days, and is thus closed.
    • CommentAuthoroutspoken2
    • CommentTimeJun 18th 2012
    Love DNS Crypt (Windows).

    Problem is that the UAC Prompt on boot is a little annoying.
    If it runs as a service, then that will go away.
    • CommentAuthorrotblitz
    • CommentTimeJun 18th 2012
    No problem. Create a service with srvany.exe starting dnscrypt-proxy.exe.

    Alternatively, start dnscrypt-proxy.exe as scheduled task at system startup running under e.g. "NT Authority\System".
    Thankful People: jedisct1, outspoken2
    • CommentAuthorjedisct1
    • CommentTimeJun 18th 2012
    Other tools like MakeService and ServiceEx also seems to do the job, see:
    Thankful People: outspoken2
    • CommentAuthoroutspoken2
    • CommentTimeJun 24th 2012 edited
    This is how I did it, following @rotblitz
    1) Remove DNSCrypt shortcut from "Startup" folder in Start menu
    2) Control Panel -> Admin Tools -> Task Scheduler
    3) I created TWO new tasks (one for proxy, one for UI (optional)

    Proxy Task:
    a) Create Task
    b) Name: DNSCrypt-Proxy
    c) Change User or Group-> "System" ->Check Names->OK
    d) Triggers->At system Startup
    e) Actions->"start a program"->
    "C:\Program Files (x86)\OpenDNS\DNSCrypt\dnscrypt-proxy.exe"
    Arguments: -d
    f) Conditions (Imp, defaults are not right)->
    Uncheck Everything
    g) Settings->
    Uncheck "Stop task if it runs longer than"
    Check "Run task as soon as possible after scheduled start is missed"

    UI Task (Optional):
    Similar to above, only the changes should be
    Name: DNSCrypt-UI
    User: Take the default, which should be currently logged in user.
    IMP: "Run with Highest Privilages" (I feel squirmish when setting this).
    Trigger: At log on
    Specific User (This user)
    Uncheck any option that says "Stop if it runs longer than"
    Actions: Start a program -> "C:\Program Files (x86)\OpenDNS\DNSCrypt\OpenDNSInterface.exe"

    To TEST the setup:
    Reboot PC after above.
    open cmd (command prompt)
    nslookup -type=txt

    Output should contain: text =

    "dnscrypt enabled (<some number here>)"


    Thanks to the users above for their suggestions, leading to above.

    I wish OpenDNS has a "Wiki" where such steps could be added with screenshots, mush easier.
    Thankful People: rotblitz, jedisct1, xecrav, avi.a
    • CommentAuthorrotblitz
    • CommentTimeJun 24th 2012
    Just a question, what would this "Arguments: -d" be good for?
    • CommentAuthorjedisct1
    • CommentTimeJun 27th 2012
    -d is not supported on WIndows.
    Thankful People: rotblitz, zelus
    • CommentAuthorweakham
    • CommentTimeJul 14th 2012
    Thanks! Followed your suggestions, but, even though Task Manager showed the UI task to be running, the ICON would not appear in the Notification Area on the Taskbar, until I set the trigger to delay starting the task for 5 seconds! Everything works beautifully now! Don't have to respond to UACC anymore; therefore, no delay getting things going!
    Thankful People: maintenance
    • CommentAuthorkschew1
    • CommentTimeJul 17th 2012
    In Windows 7 Starter,

    1) In Task settings:-
    If target is "C:\Program Files\OpenDNS\DNSCrypt\dnscrypt-proxy.exe",
    Only dnscrypt-proxy.exe is active.
    However if target is "C:\Program Files\OpenDNS\DNSCrypt\OpenDNSCryptService.exe,
    Both dnscrypt-proxy.exe & OpenDNSCryptService.exe is active as per original.

    2) If change is User or Group > "System", there are occasions where 2 instances of (1) above are running on Network Service & System, in particular if you log off from one user to another.
    However if User or Group > "Network Service", only 1 is running as per the original.

    Could someone help verify if this condition valid or if this is an isolated case.
  1.  permalink
    1) It rather sounds then like opendnscryptservice.exe calls dnscrypt-proxy.exe, and not the other way around.

    2) Sounds like an effect of Fast User Switching being enabled.

    You probably want to open a support ticket explaining what you are trying to do and why these things you notice bring some question to mind if you want a direct answer from OpenDNS.
    • CommentAuthorkschew1
    • CommentTimeJul 18th 2012 edited
    The whole purpose to take the steps as recommended by outspoken2 & weakham was to:-
    1) Avoid the UAC prompt at Admin account.
    2) Avoid having to key in the admin password at non admin accounts.
    3) Plus have DNSCrypt function as it should b4 the change.

    The conditions encountered in the previous post was something encountered when the recommend settings were put in place, just thought to share the info.:smile:
    Thankful People: maintenance
    • CommentAuthorjedisct1
    • CommentTimeJul 23rd 2012
    dnscrypt 1.0.1 can run as a Windows service.

    (not released yet, I need to test and document it first, but the code is in github if you want to give it a spin)
    Thankful People: rotblitz, zelus, maintenance

This discussion has been inactive for longer than 30 days, and is thus closed.