Azure VPN Client using without microsoft account or type VPN Server

HishamJassim 0 Reputation points
2026-09-09T07:24:05.9766667+00:00

Good , Team.

Please can you advice me about below:

Azure VPN Client using without microsoft account or type VPN Server ,

how can i do it and about the VPN server do i need a VPN Server so i can connect it ?

thanks.

Windows for business | Windows Server | User experience | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. VPHAN 43,155 Reputation points Independent Advisor
    2026-09-09T08:05:58.6033333+00:00

    Hi HishamJassim,

    Initializing an Azure Virtual Network Gateway to serve as a VPN Server is an absolutely mandatory structural parameter for forming a valid connection session.

    Regarding the request to disable the Microsoft account login mechanism, the administrator is compelled to restructure the authentication method through the Point-to-Site protocol using Certificate-based authentication. Instead of depending on Entra ID, the Azure infrastructure must be loaded with a Root Certificate, while the corresponding Client Certificate must be installed in the peripheral device's local certmgr.msc repository. Once this structure is established, the system will extract the cryptographic key as the sole authenticating argument, completing the security negotiation process without requiring any presence of a Microsoft account.

    Hope this answer has brought you some useful information. If it did, please hit “accept answer”. Should you have any questions, feel free to leave a comment.

    VPHAN

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-09-09T07:24:21.4433333+00:00

    For Azure VPN Client with Point-to-Site (P2S):

    • A separate VPN server is not required. Azure VPN Gateway provides the P2S VPN gateway service.
    • P2S connections require a route-based VPN gateway.
    • The client connects by importing the VPN client profile configuration package into Azure VPN Client and then connecting.

    About using Azure VPN Client without a Microsoft account:

    • If the P2S gateway is configured for Microsoft Entra ID authentication, users authenticate with Microsoft Entra ID credentials.
    • Microsoft Entra ID authentication is supported only for the OpenVPN protocol.
    • To authenticate and connect with Microsoft Entra ID, clients must use the Azure VPN Client.
    • Azure VPN Gateway also supports other authentication methods, including:
      • Certificate authentication
      • RADIUS / Active Directory Domain Server authentication

    If the goal is to avoid Microsoft Entra ID sign-in, use a P2S configuration based on:

    1. Certificate authentication: each client needs the Azure VPN Client installed and configured, plus the correct client certificates installed locally.
    2. RADIUS / AD Domain authentication: requires a RADIUS server integrated with Active Directory. The Azure VPN Gateway acts as a pass-through to the RADIUS server. If that RADIUS server is on-premises, a site-to-site VPN connection from Azure to the on-premises site is required for reachability.

    For Windows with Microsoft Entra ID authentication, the Azure VPN Client setup is:

    1. Open Azure VPN Client.
    2. Select + > Import.
    3. Open the extracted profile package, then in the AzureVPN folder select azurevpnconfig_aad.xml or azurevpnconfig.xml.
    4. Save the profile.
    5. Select the profile and choose Connect.
    6. Authenticate if prompted.
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.