Always on VPN - Device tunnel not installing as system Intune

Question

Greetings,

I tested to manually setup VPN profile with PSEXEC as system. Once I created it as system, it automatically created DeviceTunnel profile under \rasman\DeviceTunnel and also auto connect at logon screen.

But once I push from Intune it does not create the folder in registery under \rasman\DeviceTunnel which keeps failing to auto connect to devicetunnel at logon screen.
I wrapped the XML file and ps1 as Win 32 app and deployed it out and it worked..

Anyone know why?

Answer 1

@William Hanna Hi,

Thank you for posting in Q&A!

>>>I wrapped the XML file and ps1 as Win 32 app and deployed it out and it worked.

After discussion with my colleagues, this method you use as a workaround functions the same as manually setup VPN profile.

Since the deployment of intune involves many steps and misconfiguration could occur anytime. It would need a thoroughly analyze of your deployment of intune, which cannot be done in forum. You can first refer to the following link to compare with your own configuration:
https://directaccess.richardhicks.com/2017/12/11/always-on-vpn-windows-10-device-tunnel-step-by-step-configuration-using-powershell/

If you want to find the root cause, we suggest you open a case with Microsoft where more in-depth investigation can be done so that you would get a more satisfying explanation and solution to this issue.

You may find phone number for your region accordingly from the link below:
https://support.microsoft.com/en-us/gp/customer-service-phone-numbers

Hope you have a nice day : )
Gloria

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
https://learn.microsoft.com/en-us/answers/articles/67444/email-notifications.html