Windows 10: How to setup VPN on Windows Server 2016 such that all domain users network traffic goes...

HI,I have purchased premium subscription of zenmate VPN and installed on all domain computers and whenever needed they have to run that individually, I am looking for a solution so that I install the VPN on my domain controller and all the users traffic goes through it. Like it should have the effect such that it is installed on every individual system.RegardsEric Jones

:)

 

Windows Server 2016 - Setup Local Domain Controller


Hi,
Great post! Thank you for these detailed instructions. I got to step 4.11 - 4.13. I am running Windows Server 2016 as a VM in VM Workstation 12 Pro. Before I made these changes, I had internet access. My VM Network Adapter is set to NAT.

I'm now connected to my new domain and I've changed the Preferred DNS address back to my router's IP address, but I'm still showing "No Internet access" and I have the yellow warning on my network connection. Any suggestions? I've restarted the vm and the main machine with no luck.

 

In Windows 10 how do you ensure all traffic goes through VPN?

These are 2 questions rolled into one.

I'm basically looking for a internet kill switch in the case VPN fails

@Moab's answer settles this question nicely.

What is the easiest way to ensure all traffic goes through the VPN in Windows 10?

Is there any built in ways?

This is a different question. Note that all traffic goes through the VPN has an implied "as long as the VPN connection is up". The built-in way to route Internet traffic over VPN will transparently fallback to the local Internet connection if the VPN gets disconnected for whatever reason.

That said, the following steps should answer the 2nd question:

• right click the Start button, select Network Connections
  
• click the VPN connection you want to use, right-click, select Properties
  
• click the Networking tab, select IPv4 from the list, click Properties
  
• click Advanced, make sure "Use default gateway on remote network" is checked
  
• repeat previous step for IPv6 if applicable
  

 

VPN question

How are you connecting to the VPN, is it setup to route all traffic through the tunnel? Is it properly routing port 80 and 443 traffic through the tunnel and not blocking it on the other end's gateway?

How is the VPN setup at your office?
PPTP? L2TP? IPSec? OpenVPN?

I prefer OpenVPN, makes life easy...can host it on Windows Server, Linux, and many routers can host an OpenVPN server as well. You can have local traffic for shared drives, network maps, work and then route Internet traffic through your local ISP connection so you don't lose speed.

Depending on what you're doing, you might want all traffic traversing the VPN tunnel. But it sounds like you might have something set to force traffic through that connection. There is a setting in Windows VPN client that can help with this, but really this should be managed from the VPN server-side not the VPN client-side.

You can uncheck "Use Remote Gateway" option in Advnaced TCP/IP settings under your VPN's configuration from Network and Sharing Center.





I'm assuming you have a Windows Server VPN server or hopefully an OpenVPN server. If you are allowed to manage it, I could possibly help you get it configured to allow local web traffic and VPN traversed LAN traffic. Ensuring correct DNS server's so that LAN and NETBIOS are functioning. Take some work, but is worth the effort when a VPN is the way to go.

If your place of work is using PPTP for VPN services, go back to TeamViewer, even with recent hacks...it's more secure than PPTP. More-so even if you use 2FA, and monitor login from the web UI account information page.