Microsoft Always-On VPN - VPN profiles will randomly disappear

[CHiLL]

I have had Microsoft's Always-On VPN configured for a couple of years now and it works great. However, I've noticed an issue where the VPN profile will just simply remove itself or disappear from the user's profile, and I have no idea why.

 

Our VPN profile is configured via a batch file, which executes a PowerShell script with a VPN profile XML configuration file. This is pushed out via SCCM, via a package with source files and deployed as an application script installer to our "All Staff Laptops" collection. Even though it's deployed to a machine collection, the VPN installs in the user context.

 

When the VPN is removed, the only way to reinstall it is for the user to bring the laptop on-site, log onto the domain and Repair the VPN profile via Software Center. I've also noticed that the rasphone.pbk file is removed from the user's AppData. So it looks like something is specifically removing it.

 

Has anyone else encountered this sort of issue with the VPN? I'm not entirely sure why it's just disappearing. At first, I thought it was was something to do with the certificates expiring. But even when there's a certificate issue, the profile is still installed, it just won't connect.

Edited July 15, 2021 by CHiLL