What's up guys, it's Bernardo from the BTNHD and today is all about deploying a VPN profile
on Windows 10 using SCCM.
Or what's the new name for SCCM.
Now, I think it's MCEM, Microsoft, or M, ECM, Microsoft Endpoint Configuration Manager,
one of those who cares.
So let's get started.
Alright, so on the last video that I did with you guys, I'll show you how to create a Wi-Fi
profile.
So today is all about a VPN profile.
First things first we need to get into our SCCM console, go inside assets and compliance.
And within there, go inside compliance settings are going to expand that folder and then we
need to get into company resource assets and then BAM VPN profile.
It's like right there in your face, just click on it, right click on it.
We are going to pick create VPN profile.
You're going to get this nice little create VPN profile wizard and then we're going to
give it the information that it is asking us so one is going to be the name and the
VPN profile type.
Now if you hit that drop down, you got a bunch of operating system versions.
For me, I'm going to do windows 10.
But you are able to push out this profile to Windows 8, Windows Phone, 8.1, and so on,
so on.
So once you pick your VPN profile type, and then give it a name, click on next select
your platform.
So if you expand that you got a bunch of Windows 10.
So depending on what profile you picked on the first dialog, right, this right here will
change because I've picked windows 10.
These are the options that I have.
I'm going to do 64 and 32 bits, and then I'm going to click on Next.
And this is where you start configuring your VPN connection.
So on the drop down connection type you have a lot so it really depends on your environment,
pick what fits your environment.
So I'm going to pick Microsoft automatic just for this video.
And then we are going to click on Add and within would need to provide the following
a friendly name and also a IP address or a full qualified domain name.
I gave it all that information, click OK.
And then bam, you are able to check off bypass VPN when connected to the company network.
This is pretty awesome.
Because if you have consultants with laptops that are coming into the office to chill or
talk to their teammates, when they are within your network, you don't want them to be part
of VPN, right?
You want them to be part of the local network.
So that's up to you if you want to pick that option.
Click Next.
And then it's time to configure your VPN.
When you click on that drop down, there's a bunch of options.
I picked Microsoft automatic.
So these are the options that I get for that particular VPN type, pick what you want, configure
it, and then you're good to go.
Now because I picked up MSCHAP v2, the config button wasn't highlighted so there's nothing
to configure.
So depending on what you pick within that menu, that configure button will be highlighted
you Click on configure to continue the settings for that particular method.
Now for MSCHAP, I'm not going to do any conditional access so I'm going to leave everything as
the default, you are able to do a Windows Information Protection doing a primary domain,
configure that as well.
I'm not going to do that within this video.
But because I I'm not going to do it within the video because it really depends on your
environment.
I don't know what type of VPN access you have.
So you have to configure it to fit your network.
click next here if you have proxy settings within your network, this is where you will
configure it once you configure it.
Click on Next.
If you have any specific applications that should load up once the user is part of your
VPN.
This is where you will load it up.
You have it's broken down into desktop applications as well as universal applications.
The Universal applications would definitely work out for Windows 10.
If you're deploying custom apps, within your nine to five job once you set all that information
up, click on Next.
If you have any boundaries, if you have network traffic rules or DNS names for your VPN profile
or routes for your VPN profile, this is where you configure it.
I'm going to show you guys how the dialog box looks for each one of them.
This right here is for your network traffic rules.
When you click on Add, it's going to prompt you for this information, enter that information.
If you click for the DNS server, you click on Add is going to give you this information
just enter it for your environment for it to work.
And then last but not least for your VPN route information, you will give it the destination
prefix as well as the prefix size.
Once you insert all that information so it can fit and work within your VPN environment.
You're going to click on Next.
Get a nice little summary of everything that you've done so far.
click Next again.
green checkmarks is always a good thing.
Hit OK.
But you're not done yet.
We're going to select your VPN profile.
Right click on it, click on deploy And then just like the Wi-Fi profile, you need to click
on Browse.
So you can pick a collection.
And I'm not going to pick a collection because I don't have anyone within my lab to push
out a VPN.
So hopefully you guys can test this out, make sure it works, let me know in the comments
section, but most likely, you have a collection that deals with individuals that have laptops
like consultants that have laptops, and then you want this profile to be pushed out to
them once they're inside your SCCM network.
Right.
So hopefully you guys enjoyed this video.
Don't forget to by hitting that like button also leave comments below.
Don't forget about punching, smashing, elbow, whatever you need to do, hit that subscribe
button to get the latest and greatest from me, and I catch you guys on the next one.
Peace out!