Microsoft admits Windows 11 'Always On VPN' fix failed
Microsoft confirmed that its October 13 patch failed to resolve the 'Always On VPN' connectivity bug introduced in September 2026. Enterprise users relying on automatic protocol selection still face hanging or failed connections. IT administrators must manually pin VPN profiles to a single protocol as a temporary workaround. A permanent fix is expected within weeks, but the delay disrupts secure remote access for organizations dependent on Microsoft's native remote access infrastructure.
Key points
- Microsoft, the developer of the Windows 11 operating system, acknowledged that its October 13 security update did not fully resolve the 'Always On VPN' defect.
- The bug, introduced in September 2026, causes enterprise VPN connections to hang indefinitely or fail entirely when automatic protocol selection is enabled.
- IT administrators are advised to manually pin VPN profiles to a single protocol as an interim workaround until the permanent fix is deployed.
- Microsoft issued a service bulletin this week, walking back its initial claim that the October Patch Tuesday update had successfully closed the issue.
- A permanent resolution is expected within the coming weeks, though the delay leaves network administrators managing unstable remote access environments.
- The issue primarily impacts organizations using Microsoft's native Always On VPN technology for secure, encrypted remote access across their networks.
Microsoft has confirmed that the connectivity issues affecting Windows 11's 'Always On VPN' feature remain unresolved, despite a previous patch suggesting otherwise. The tech giant admitted in a service bulletin that the bug, which was introduced during the September 2026 security updates, was mistakenly flagged as fixed in the October 13 patch. This development reverses the initial optimism that the October Patch Tuesday release would end the disruption for enterprise users.
The defect primarily impacts organizations that utilize Microsoft's native Always On VPN technology with automatic protocol selection configured. Affected users experience connections that hang indefinitely or fail to establish entirely, disrupting secure remote access. To mitigate the issue, IT administrators are currently instructed to manually pin VPN profiles to a single protocol. This temporary workaround provides stability but requires additional configuration effort across enterprise networks.
Microsoft states that a permanent fix is expected within the coming weeks. Until then, network administrators must manage the precarious position of relying on an unstable remote access tool. The delay highlights the challenges in maintaining complex enterprise infrastructure, where a single configuration change can have widespread operational impacts. The situation underscores the importance of monitoring service bulletins for critical updates that may not be fully reflected in standard patch notes.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.
