Modify Always On without InTune

Question

Is it possible to modify an Always On VPN profile without using InTune and without having to delete/recreate the profile? I'm looking to add exceptions to the 'ForceTunnel' section.
Regards,
Pete.

Answer 1

Hi,

Thank you for posting in Q&A! In regards to your issue, here're my suggestions:

According to my research, is it possible to modify an Always On VPN profile without using InTune, but so far there doesn't exist a method that without deleting/recreating the old profile.

You can configure the Always On VPN client through PowerShell or Microsoft Endpoint Configuration Manager. All three require an XML VPN profile to configure the appropriate VPN settings. Automating PowerShell enrollment for organizations without Configuration Manager or Intune is possible.

For more details, please refer to:
https://learn.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/vpn-deploy-client-vpn-connections[vpn-deploy-client-vpn-connections][1]

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.