Blog Post

Core Infrastructure and Security Blog
7 MIN READ

Trying Out Autopilot Hybrid Join Over VPN In Your Azure Lab

arnabmitra's avatar
arnabmitra
Icon for Microsoft rankMicrosoft
Aug 27, 2020
As an IT admin you plan to ship new devices to end users which can join the on-premises AD (Active Directory) by leveraging Autopilot with Intune for device management. This post is a walkthrough o...
Updated Aug 27, 2020
Version 2.0
arnabmitra
Modern-Workplace's avatar
Modern-Workplace
MCT
Mar 19, 2021

Hi, 

 

Thank you for your article.

 

I have a question regarding Autopilot with Always on VPN and Windows 10 license. Always On VPN auto connect doesn't work with Windows 10 Pro

You say, it's that's an expected behavior

 

But my customer doesn't use MAK license for Windows 10 entreprise, but they use KMS Licenses or Windows 10 Subscription activation with Azure AD License for Windows 10 Enteprises.

Both are tested and doesn't work:

With KMS activation by Intune, it's doesn't work, because, the KMS server is not available and windows 10 remains in Pro edition until the AD and kms servers can be contactacted. And they cannot be contacted because VPN is not connected...

Also, with Windows 10 Subscription activation, the license enterprise is applied after user can logon on computer, but if the VPN is not connected, it's impossible to open a session...

 

So, how we can deal in this situation? I think it's a misconfiguration from microsoft part for this particulary issue with Autopilot and Always On VPN

 

Thank you