Changing VPN Profile Settings

[FN-GM]

Hello,

 

As some of you know I have inherited a network that is a bit of a mess. The previous IT guys had setup VPN profiles on the laptops manually. They pointed directly to the public IP address rather than a DNS. Problem now is we are changing ISP and will have new addresses. The VPN profiles will become invalid and users won't be able to connect.

 

The VPN is using a pre-shared key so I can't push it out via group policy.

 

I am wondering if someone knows where the configuration for the screenshot is stored please? I could potentially push this change via SCCM or Group Policy.

 

I we have hundreds of laptops across Australia so its going to be a huge problem to do this manually.

 

Does anyone else have any other ideas maybe? maybe there is an easier way and I have missed it.

 

Thanks

[Norphy]

PowerShell?

 

Get-VpnConnection or Get-VpnConnection -AllUserConnection might help

 

 

https://docs.microsoft.com/en-us/powershell/module/vpnclient/get-vpnconnection?view=win10-ps

[FN-GM]

Get-VpnConnection -AllUserConnection & Get-VpnConnection returns nothing at all.

 

Thanks

[itwasntme]

Get-VpnConnection -AllUserConnection & Get-VpnConnection returns nothing at all.

 

Thanks

 

Just checking, returns nothing in an admin powershell?

[caffrey]

the pbk is stored in %AppData%\Microsoft\Network\Connections if that helps , could edit it ?

[FN-GM]

Just checking, returns nothing in an admin powershell?

 

Same.

 

The VPN profile is actually setup using some kind of installer. I think it’s from the old school Windows server remote access features. You could create an installer for VPN. Can’t think of its name though.

[mavhc]

Or it's in C:\Windows\System32\ras pbk file

[FN-GM]

Thanks. It’s 10pm now so will have another look in the morning.

 

Please keep the suggestions coming.

[caffrey]

By coincidence I'm in a similar dilemma, a user is having issues connecting due to DNS issues I think (error 868) So I've tried to talk them through using IP instead however everything we try is blocked due to no admin access

[john]

You can edit the phonebook via via GPP and use it to push it all out if its all done in the Windows VPN wizard. You just need to open the PBX file and use the edit features in GPP to edit the lines etc.

[caffrey]

Isn't it a bit chicken and egg though ? Can't pick up the new policies if they aren't connected to the domain ?

[mavhc]

I just emailed someone the pbk file, double click, click connect, put in user/pass