


Select Custom from the Profile type drop-down list. Select Windows 10 and later from the Platform drop-down list.Ħ. Enter a descriptive name for the new VPN profile.ĥ. In the navigation pane click Device Configuration.Ĥ. Once ProfileXML has been configured, open the Intune management console and follow the steps below to deploy it using Intune. I’ve already documented how to deploy an Always On VPN device tunnel configuration using Intune, so this post will focus on deploying the user tunnel using ProfileXML. Sample ProfileXML files for both user and device tunnels can be downloaded from my GitHub repository. It can be deployed using Intune or PowerShell. By contrast, the ProfileXML node includes all Always On VPN settings in a single configuration file. When configuring Always On VPN using the Intune UI, each setting is configured individually. ProfileXML is a node within the VPNv2 Configuration Service Provider (CSP). To implement any of the above features or settings the administrator must create and upload a custom ProfileXML. Missing from IntuneĪt the time of this writing (updated March 2021), the following Always On VPN settings cannot be configured natively using the Intune UI. However, Intune does not expose all Always On VPN settings to the administrator, which can be problematic. Guidance for using the UI to deploy Windows 10 Always On VPN with Microsoft Intune can be found here. Intune has an intuitive user interface (UI) that can be used to configure and deploy Always On VPN profiles to Windows 10 clients. The method chosen will depend on which features and settings are required. They can use the native Intune user interface (UI) or create and upload a custom ProfileXML. When deploying Windows 10 Always On VPN using Microsoft Intune, administrators have two choices for configuring VPN profiles.
