Always on VPN or update RD Web access?

[Boredguy]

Did you have any step by step guide or url link to follow?

 

I just followed the official MS guide that can be found here -> https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-deployment

[MS2011]

I just followed the official MS guide that can be found here -> https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-deployment

 

[emoji106]

[mdrabble]

Looking at using Device Tunnel - which as I understand uses Computer based Certificates as opposed to user based certificates.

 

Have a GPO for both computer and user certificate auto enrollment and ran certlm.ms and gone into Personal -> Certificates and cannot see any client based certificate.

 

Anyone who uses Device tunnel able to point me in the right direction?

 

Cheers

[meakjoe]

Have you got the Certificate Template set up on your Certificate Authority correctly, with the Security Group containing your computers selected to 'Auto-Enroll' on the machine certificate?

[mdrabble]

I can see a 'computer' certificate but looks like it isn't set to auto-enroll when I look at the security settings.

 

Might Duplicate a Cert for testing - choices are Computer or Workstation Authentication.....

[meakjoe]

This is the guide I followed which worked perfectly, scroll down until you hit the Device Authentication section. Tutorial – Deploy Always On VPN | Alex Ø. T. Hansen (tofte-it.dk)

[mdrabble]

Perfect - looked through and has the details for creating the device certificate.

 

Will give that a go tomorrow.

[techie17]

Just out of interest, has anyone setup and is using PDQ Deploy? It looks a lot easier to setup than AOVPN but dont know if its any good?

[synaesthesia]

Just out of interest, has anyone setup and is using PDQ Deploy? It looks a lot easier to setup than AOVPN but dont know if its any good?

 

Sorry in what respect, deployment of the settings?

[techie17]

The actual system itself. I know there is an MSI that needs to go on the clients where as AOVPN there isn't but does PDQ link effectively do the same job?

[synaesthesia]

Ah, you said PDQ Deploy Looking up PDQ link now, maybe a useful backup.

[techie17]

Ah, you said PDQ Deploy Looking up PDQ link now, maybe a useful backup.

I've lost the plot! ha ha, sorry yes i meant PDQ Link

[cw222]

Tried PDQ link out and it was fine. Takes hardly any time to set up as its pretty much automating everything apart from a VPN AD group - one thing I noticed, is if you double click the client application, it opens twice!