This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 48%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGL%3C/text%3E%3C/svg%3E)
Hi
I am trying to create a VPN connection that is available on the Windows 10 Pro logon screen. I've done much Googling and tried the add-vpnconnection method in Powershell but whatever I try the connection is not avaialble on login. Can anyone help?
Thanks,
Gareth.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 3%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
I know this is an old thread... but trying to see if any other progress has been made. I tried everything listed in the thread for a non domain machine and still can not get the VPN to show at login screen.
Can I ask why you need this on the logon screen for a non-domain joined machine? The whole point of the login screen thing is to bring up the VPN so the domain-authentication can work for login (normally you would not have direct access to your AD over the internet, hence the need for a VPN).
Is availability of VPN on login screen only possible on domain joined machines? (usually) If so I will try jining a traditional domain.
It's entirely possible, yes. The specific scenario I believe it's designed to address is logging into a domain account when you are offsite and the domain is only accessible via VPN.
That said, as noted, it is broken more often than it's fixed, and the UI keeps getting forgotten, so I suspect this is pretty low on MS's list of things they care about. Azure-AD is the way they want all this remote shenanigans to work, so if you're trying to use a more traditional approach it's probably just going to keep sucking like it currently does and then eventually go away officially.
I wonder if the issue is Azure-AD. Perhaps it's not considered domain joined in the same way and so doesn't trigger the availability?
Hi @Jon Marnock
Thanks for this. I tried using the exact string you posted and the connection was created, it did not however appear on the logon screen.
Just be aware we've found a few bugs in recent Windows 10 builds where this will fail with an error message stating the username or password is incorrect (this is not correct - the VPN comes up just fine but SYSTEM terminates it less than 1 second after it's created).
We use the following, from an elevated (admin) powershell prompt:
Add-VpnConnection -Name 'VPN Name' -ServerAddress 'vpn.server.address' -TunnelType 'L2TP' -L2TPPSK 'redacted' -Force -DnsSuffix 'if.you.care' -AllUserConnection
while this adds a new vpn entry that can not be modified via gui... there is nothing on the login screen. This does not work on Win10 21h1 - 19043.1165
I am using the same version of windows and it definitely shows up on the login screen - but the difference is it's an enterprise version of windows 10, and joined to a domain.
Please also note that even though this "works", there's a bug and it doesn't actually allow you to log in with the domain creds as the VPN terminates due to an internal error in windows before it can fully auth and log in.
My advice is: don't try and do this, MS clearly doesn't care about it working, it's broken more often than not, and tbh it's not the most secure VPN anyway. Plus I honestly cannot see a point to bringing up the VPN before login on a non-domain joined machine anyway. Just open the VPN after you log in.