Find a package family name (PFN) for per-app VPN

Applies to: Configuration Manager (current branch)


Starting in version 2203, this company resource access feature is no longer supported. For more information, see Frequently asked questions about resource access deprecation.

There are two ways to find a PFN so that you can configure a per-app VPN.

Find a PFN for an app that's installed on a Windows 10 computer

If the app you are working with is already installed on a Windows 10 computer, you can use the Get-AppxPackage PowerShell cmdlet to get the PFN.

The syntax for Get-AppxPackage is:

Get-AppxPackage [[-Name] <String> ] [[-Publisher] <String> ] [-AllUsers] [-User <String> ] [ <CommonParameters>]


You may have to run PowerShell as an admin in order to retrieve the PFN

For example, to get info on all the universal apps installed on the computer use Get-AppxPackage.

To get info on an app you know the name of, or part of the name of, use Get-AppxPackage *<app_name>. Note the use of the wildcard character, particularly helpful if you're not sure of the full name of the app. For example to get the info for OneNote, use Get-AppxPackage *OneNote.

Here is the information retrieved for OneNote:

Name : Microsoft.Office.OneNote

Publisher : CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Architecture : X64

ResourceId :

Version : 17.6769.57631.0

PackageFullName : Microsoft.Office.OneNote_17.6769.57631.0_x64__8wekyb3d8bbwe

InstallLocation : C:\Program Files\WindowsApps


IsFramework : False

PackageFamilyName : Microsoft.Office.OneNote_8wekyb3d8bbwe

PublisherId : 8wekyb3d8bbwe

Find a PFN if the app is not installed on a computer

  1. Go to
  2. Enter the name of the app in the search bar. In our example, search for OneNote.
  3. Click the link to the app. Note that the URL that you access has a series of letters at the end. In our example, the URL looks like this:
  4. In a different tab, paste the following URL,<app id>/applockerdata, replacing <app id> with the app id you obtained from - that series of letters at the end of the URL in step 3. In our example, example of OneNote, you'd paste:

In Edge, the information you want is displayed; in Internet Explorer, click Open to see the information. The PFN value is given on the first line. Here's how the results look for our example:

  "packageFamilyName": "Microsoft.Office.OneNote_8wekyb3d8bbwe",
  "packageIdentityName": "Microsoft.Office.OneNote",
  "windowsPhoneLegacyId": "ca05b3ab-f157-450c-8c49-a1f127f5e71d",
  "publisherCertificateName": "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US"