Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,786 questions
How to fix Azure VPN Client "Access denied" error after updating Windows 11?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
Hello.
After updating Windows 11 to 22621.2428, on October 23, my Azure VPN Client application stopped working properly. I can't see my previously added connection nor can I import again the .xml file. Also, I get an "Access denied" message in logs:
At the same time, I changed my work microsoft account password the same day, so I'm not entirely sure what caused this issue to happen.
I already tried to give permissions to "NT Service\DnsCache" group in "HKLM:\SYSTEM\CurrentControlSet\Services\Dnscache" without success.
Thanks in advance.
Azure VPN Gateway
{count} votes
-
KapilAnanth-MSFT 49,536 Reputation points Microsoft Employee Moderator2023-11-13T08:59:58.83+00:00 Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that Azure VPN Client is throwing a "Access denied" error after updating to Windows 11.
Please uninstall the client app and redownload the same.
- You can try redownloading the Azure VPN Client App from the Microsoft Store or
- You can download the file from: https://aka.ms/azvpnclientdownload.
- Verify that the Azure VPN Client has permission to run in the background. For steps, see Windows background apps
Should there be any follow-up questions or concerns, please let us know and we shall try to address them.
Thanks,
Kapil
-
Anonymous
2023-11-13T10:58:23.3233333+00:00 Hi @KapilAnanth-MSFT. I have tried it but it hasn't worked.
-
KapilAnanth-MSFT 49,536 Reputation points Microsoft Employee Moderator
2023-11-15T05:37:24.1033333+00:00 You have mentioned that you have updated the HKLM.
Can you please validate if you updated the below key? ("Parameters\DnsPolicyConfig" was not mentioned in your question)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters\DnsPolicyConfig Add built-in group "NT Service\DnsCache", and provide these permissions (Windows):
- Principal: "NT Service\DnsCache"
- Type: Allow
- Applies to: This key and subkeys
- Advanced permissions: Query Value, Set Value, Create Subkey, Enumerate Subkeys, Notify, Read Control
Cheers,
Kapil
-
Anonymous
2023-11-15T10:41:55.7766667+00:00 Hi @KapilAnanth-MSFT Yes, I gave all those permissions to the "NT\Service\DnsCache" group for that key. Still getting "Access Denied" error.
-
KapilAnanth-MSFT 49,536 Reputation points Microsoft Employee Moderator
2023-11-15T10:43:44.7266667+00:00 -
Anonymous
2023-11-15T11:07:05.5166667+00:00 Not really familiar with Intune, but I think yes. This device is managed by my company, and if I go to Settings > Accounts > Access work or school, and click on "Info" in my account, I see "Microsoft Intune Management Extension: EnforcementCompleted" under "Applications".
-
KapilAnanth-MSFT 49,536 Reputation points Microsoft Employee Moderator
2023-11-16T09:49:05.1033333+00:00 Thanks for sharing the info.
It appears there are some challenges with an Intune Managed Windows 11 Device for VPN (any VPN client and not limited to Azure VPN Client).
See : Create VPN profiles to connect to VPN servers in Intune, under Windows 11 Section
To troubleshoot further, I am afraid we will need a specialized 1:1 session, where a support engineer can have a screen share session to deep dive.
If you have a support plan you may file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.
Cheers,
Kapil
Sign in to comment
Sign in to answer