Client VPN Group Policy deployment with shared secret

[jameshottinger]

Hi all,

Has anyone figured a way of incorporating the VPN shared secret into a GPO containing the VPN settings to be deployed to users

thanks

james

[WadeAlsup]

Hi @jameshottinger, 

I have a link to a Spiceworks article saved in my notes from when I was trying to do the same thing. I never could get a GPO that would include the pre-shared key...but I was able to use the CMAK (Connection Manager Administration Kit) and create a configuration that works for our scenario. It may be worth looking into. 

https://community.spiceworks.com/topic/417332-gpo-to-configure-l2tp-vpn

https://www.windows-server-2012-r2.com/create-a-connection-profile-with-the-cmak-wizard.html 

[jameshottinger · Accepted solution]

Hi @WadeAlsup

i have found a Powershell script we can run on startup:

Add-VpnConnection -AllUserConnection -Name "(vpn_name)" -ServerAddress "(vpn_address)" -TunnelType L2tp -EncryptionLevel Optional -L2tpPsk "(vpn_sharedsecret)" -AuthenticationMethod Pap -Force

Thanks

James

[WadeAlsup]

Nice!!!