@Nash has a set of client VPN scripts: https://github.com/gammacapricorni/happy-meraki-client-vpn    It sets "UseRasCredentials" to 0, so that VPN credentials are not used against AD resources.  It'll just use the normal users AD credentials.   You can also set this manually in the *.pbk file. ... View more