I couldn't find VPN bug fixings in the release notes of KB5129195. any official information from MS?
Always On VPN fails after installing KB5124008 on Windows 11
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 11%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ET%3C/text%3E%3C/svg%3E)
Tifoso1979
10
Reputation points
Hello,
We are experiencing an issue with Always On VPN after installing the September 2026 Windows 11 security update KB5124008.
Environment
- Windows 11 clients (24H2/25H2)
- Always On VPN
- Certificate-based authentication
- RRAS + NPS on Windows Server 2019
- Microsoft Intune deployed VPN profile
Issue
After installing KB5124008, Always On VPN stops working.
Troubleshooting performed
We have been able to reproduce the issue consistently:
- Always On VPN works normally before installing KB5124008.
- Install KB5124008.
- Always On VPN no longer connects/functions correctly.
- Uninstall KB5124008.
- Reboot the device.
- Always On VPN works again immediately.
The behavior has been reproduced on multiple client devices.Hello,
We are experiencing an issue with Always On VPN after installing the September 2026 Windows 11 security update KB5124008.
Environment
- Windows 11 clients (24H2/25H2)
- Always On VPN
- Certificate-based authentication
- RRAS + NPS on Windows Server 2019
- Microsoft Intune deployed VPN profile
Issue
After installing KB5124008, Always On VPN stops working.
Troubleshooting performed
We have been able to reproduce the issue consistently:
- Always On VPN works normally before installing KB5124008.
- Install KB5124008.
- Always On VPN no longer connects/functions correctly.
- Uninstall KB5124008.
- Reboot the device.
- Always On VPN works again immediately.
The behavior has been reproduced on multiple client devices.
We stopped to rollout KB5124008
Windows for business | Windows Client for IT Pros | Networking | Network connectivity and file sharing
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 22%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Matthew 0 Reputation points2026-09-19T16:08:39.0333333+00:00 # KB5129241 - Hotpatch / OS build 26100.9448
# KB5129195 - Rollup / OS build 26100.9457
# KB5124008 - Rollup / OS build 26100.9445
These All break always on vpn for us unisntalling all repairs the issue**.**
Using IKE with SSTP failover and Machine and user Certs.
This took vpn out Always On VPN three time for us over 100 laptops needing to be fixed in reoccurring issues for all, and a lot of reboots to manually unsintall one at a time in series.Totally Not a happy camper; Users are very Frustrated
Sign in to comment
9 answers
Sort by: Oldest
-
Tifoso1979 10 Reputation points
2026-09-16T06:49:37.6766667+00:00 -
Matthew 0 Reputation points
2026-09-19T00:25:21.7233333+00:00 The always on vpn issue (will not connect, timesout) still exists after KB5129195 for us, and even with KB5124008 uninstalled the new update installed. This took vpn out twice for us, this weekend will be me installing it over 100 laptops.
Not a happy camper
Sign in to comment -
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 97%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJH%3C/text%3E%3C/svg%3E)
Jaap Hiemstra | Jaap Solutions 0 Reputation points2026-09-23T15:37:03.6633333+00:00 We have the same issue with a lot of laptops, also mine. What I found out
I can connect to the AOVPN using my phone as a hotspot which has an IP V6 address.
I cannot connect to the AOVPN using my normal internet connection witch uses an IP V4 address.
When I am connected with the use of the hotspot and then switch over to my normal internet connection, the VPN stays connected.
Weird right?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 1%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
NKT 0 Reputation points2026-10-14T07:51:38.45+00:00 October 13, 2026—KB5127648 (OS Builds 26300.9711, 26200.9711 and 26100.9711)
- [Always On VPN] This update fixes an issue that affects Always On VPN connections after installing KB5124008. When automatic protocol selection or protocol fallback was configured, affected VPN connections could remain stuck in a Connecting state or fail to connect after an initial connection attempt failed. In some cases, subsequent connection attempts could display the error, "The specified port is already in use."
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 91%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Mitchel 0 Reputation points2026-10-14T14:59:04.1566667+00:00 We’re experiencing the same issue. Yesterday, Microsoft finally released KB5127648, which was supposed to include the fix for the Always On VPN issue. Unfortunately, the issue still persists in our environment.
We’ve tried wiping the device and removing the VPN profile, but neither has resolved the problem. Even fully updating the device to KB5127648 first and only then deploying the VPN configuration doesn’t resolve the issue.
The only workaround that works is completely uninstalling the update, just as we’ve had to do with every update released since KB5124008.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 26%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPJ%3C/text%3E%3C/svg%3E)
Paul James 0 Reputation points2026-10-14T16:02:49.4466667+00:00 I'm "glad?" you have mentioned this. We have the VPN Failback issue too and was expecting the newest patch to fix the VPN issue. But as you mentioned it does not seem to have fixed it... Massively frustrated.
Currently awaiting others to voice on various forums their experience to get some kind of consensus on whether the fix works for others.
Sign in to comment -