tech at work


Group Policy Preferences to create a VPN connection

Everybody knows the Group Policy Preferences method to create a VPN connection on a Windows 7 client.
But there seems no way to disable IPv6 or check the "Use default gateway on remote network" checkbox via Group Policy.

Indeed, there is a hidden way:

If you look on the client, there is a rasphone.pbk file located in %appdata%\Microsoft\Network\Connections\Pbk
For system-wide connections the path is %programdata%\Microsoft\Network\Connections\Pbk

You can try to open that file using your favourite text editor - you will see a INI-style structure.

That gives us the possibility to set the missing options using Group Policy INI Preferences:

ExcludedProtocols=8 disables IPv6
IpPrioritizeRemote=1 enables that default gateway checkbox

INI preferences

Filed under: Windows Leave comment
Comments (2) Trackbacks (0)
  1. Perfect, this really helped me as Windows 10 refused to use VPN DNS servers with IPv6 enabled.

Leave a comment

No trackbacks yet.