Create a User Level Windows VPN Policy

You can configure a VPN policy for your Windows devices to securely and remotely access your organization’s network. The device must be enrolled in JumpCloud MDM. This policy works on devices running Windows 10/11.

Prerequisites

• Devices must be enrolled in Windows MDM (Mobile Device Management).
• Target devices must be running Windows 10 version 1511 (10.0.10586) or later. This policy is supported on the following Windows editions:
  • Windows Pro
  • Windows Enterprise
  • Windows Education
  • Windows SE
  • IoT Enterprise
  • IoT Enterprise LTSC
• For more information on device compatibility, see Agent Compatibility, System Requirements, and Impacts.

Considerations

• This policy applies automatically when the assigned user has an active, authenticated Windows MDM session.

Creating the Policy

To create a VPN policy for Windows devices, do the following:

Selecting the Policy Template

1. Log in to the JumpCloud Admin portal.

2. Go to Device Management > Policy Management. The Policy Management page is displayed.
3. On the Policy Management page, click +Add New.
4. Select User Policy to assign the policy to users and users groups. On the New User Policy page:
   • Select the Windows tab.
   • Search and select the required policy name and click Configure. The Details tab of the policy is displayed.
   • On the Details tab, configure the required policy configuration settings.
   • (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
   • (Optional) In the Policy Notes field, enter details such as creation date of the policy, and information on testing and deployment of the policy.

Configuring the Policy

• In the Settings field, select the settings you want enabled for this policy.

In the Per App VPN Rules section, configure the following:

Finding Package Family Name (PFN) or App ID

Package Family Name (PFN) always follows the[PublisherName].[AppName]_[Hash]format.

To get the App ID of an app such as Microsoft Edge app, run the following command in PowerShell:

1. Open PowerShell on your Windows computer that already has the Microsoft Edge app installed.
2. Run the command Get-AppxPackage -Name Edge | Select-Object Name, PackageFamilyName
3. The following output is displayed:
   • Name : Microsoft.MicrosoftEdge
PackageFamilyName : Microsoft.MicrosoftEdge_8wekyb3d8bbwe
4. Copy the PackageFamilyName string and paste it in the App ID/File ID field as shown in the image below.

Finding the File Path of an App

To get the file path using PowerShell, do the following:

1. Open PowerShell on your Windows computer that already has the Microsoft Edge app installed.
2. Run the command Get-ItemPropertyValue -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\msedge.exe" -Name "(Default)".
3. The following output is displayed:
   • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe.

Few more examples of app IDs of store apps:

Applying the Policy

• (Optional) Select the Policy Groups tab. Select one or more policy groups where you want to add this policy. 
• Select the User Groups tab.  Select one or more user groups where you want to apply this policy. For user groups with multiple OS member types, the policy only applies when a user logs into a supported Windows device that is enrolled in MDM.
• Or, select the Users tab. Select one or more users to whom you want to assign this policy.
• Click Create Policy. A success message is displayed indicating the completion of policy creation.

Viewing Policy Status

1. Select the Status tab.
2. To see the last Result Log for a device where this policy is applied, click view.