Forum Discussion
Prevent users from disconnecting AOVPN user tunnel
- Microsoft have implemented the required change (just needs to filter into Windows 10 and the intune management profiles)
https://learn.microsoft.com/en-us/windows/client-management/mdm/vpnv2-csp#deviceprofilenamedisabledisconnectbutton
posted for anyone else seeking this info in the future
also see the blog post by the incomparable Richard Hicks https://directaccess.richardhicks.com/2023/03/06/always-on-vpn-csp-updates/
From what I've read, the OP is referring to Enterprise Windows 10 deployments, specifically the use of Always On VPN (https://learn.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/always-on-vpn-enhancements) which is commonly deployed via Intune.
This isn't about a single VPN that needs to be 'Always On' this is about the literal technology which Microsoft have called 'Always On VPN'. Specifically the OP seems to be referring to this:
Which can be toggled by the user and has no method of policy control. That about right Peter Holland ?
BestowOk so he already identified the problem, and I gave examples of how to deal with this issue, using a solution that I already use:
"Which can be toggled by the user and has no method of policy control. That about right"
