Azure VPN client disconnect when a second user connect to the server

Javier Acebo 1 Reputation point
2021-08-20T20:08:45.307+00:00

I deployed an Azure ADDS, then a virtual network gateway was deployed, and a point-to-site VPN was configured to be able to join a couple of remote servers hosted in a different cloud to this domain. I was able to join the servers to the domain service, now the VPN client is running in the local admin account and when I log in as a second user to the server the VPN client disconnect which makes we lost connection with the domain controllers.

Microsoft Entra
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Shashi Shailaj 7,581 Reputation points Microsoft Employee
    2021-08-21T15:41:21.727+00:00

    @Javier Acebo ,

    As you have mentioned that you have used Point-to-Site connection . The P2S VPN connection to the AAD domain services Virtual network may still be connected for the local admin account's session but the same would not be available for other user logging on to the same server. It is available separately for each user so every user would have to connect the VPN again . I am not sure of the VPN client you are using but if you are using Azure P2S VPN client on a windows 10 machine to connect then you may be able to configure Always on VPN device tunnel. This is a native feature of Windows 10. Please check the linked article. Its a long read.

    Since you are running Azure AD domain services so , I am assuming that you have a requirement to deploy and run some applications which require legacy protocol auth (Kerberos , NTLM etc.) and you may be running them in a different cloud. For critical production application workloads , I would always recommend to use site-to-site VPN for simplicity and continuous availability .

    Hope the information helps. In case you still have any further queries , please do let us know and we will be happy to help you further.

    Thank you.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.