SCCM and deploy Windows 10 Always On VPN Custom profile

FrancescoFacco Since you need to make changes have you considered using Configuration Item(s) [Script] to do that evaluation and remediation. Ideally, you can set up a configuration baseline that should be able to do this, that's one option. Another option might be to try different deployments. https://docs.microsoft.com/en-us/mem/configmgr/compliance/deploy-use/create-custom-configuration-items-for-windows-desktop-and-server-computers-managed-with-the-client#bkmk_script