Share via


Cannot enable shared access. error: 87 the parameter is incorrect (VPN Starts Internet Connection Sharing service failure )

Question

Friday, January 19, 2018 1:55 AM

When trying to enable Internet Connection Sharing on a VPN connection (windows build in VPN client), it can't be done and returns an error information:

"cannot enable shared access. error: 87 the parameter is incorrect"

This BUG has been brought to Windows 10 for a long time , probably  since Version 1607, and still remains unfixed untill now (Version 1709, Build 16299.192)

In early windows 10 version such as 1511, this function works fine.

Here comes the most weird thing. I'm pretty sure about my OS is fine. I've reinstalled my windows 10 system and the sharing function is just fine on other network adapters such as ethernet or wi-fi adapter, even a 3rd party VPN client adapter. 

The function just can't work on windows build in vpn client (WAN Miniport adapter) .

I hope Microsoft engineer can fix this bug soon . I have been waiting a long time for this .

PS:

1 The VPN connects smoothly. There is no VPN connection problem

2 I have tried to reinstall Version 1511 and Version 1709 on the same hardware to exclude any other influence.

3 Internet Connection Sharing is enabled in Windows Defender Firewall rules

All replies (5)

Saturday, September 8, 2018 6:20 PM

Momominta, your answer really doesn't help at all.

It more looks like a Microsoft bug since if the VPN connection was created by other 3rd party applications, such as NordVPN, there's no problems.


Saturday, September 8, 2018 8:03 PM

Momominta,

That's what I already tried - many times. I believe that's what Dxy00 tried many times, too. Not sure if you've ever tried to simulate this problem, otherwise you won't take the answers so easy.


Saturday, September 8, 2018 8:06 PM

Momominta,

That's what I already tried - many times. I believe that's what Dxy00 tried many times, too. Not sure if you've ever tried to simulate this problem, otherwise you won't take the answers so easy.

Quote the original post from Dxy00: https://answers.microsoft.com/en-us/windows/forum/windows_10-networking/cannot-enable-shared-access-error-87-the-parameter/b654d9e5-07f0-48c2-a256-f893f608731b


Monday, September 10, 2018 3:30 AM

In my case, I created the VPN connection using the Windows 10 (1803) wizard hoping to use it as a pre-login VPN connection and make it sharable

I can confirm this is still a bug in 1803. You can check the Sharing box while the VPN is connected, but after disconnecting and reconnecting, I received the error: No such host is known

After creating and sharing the connection, I ran the PowerShell command:

Get-VpnConnection

It showed AllUserConnection: False

When I ran the command:

Set-VpnConnection -name (name from previous command) -AllUserConnection $true

I received the error: The configuration cannot be applied to the global user VPN connection (VPN) : The system could not find the phone book entry for this connection.

After troubleshooting this error, I found I was adding the VPN connection incorrectly. Your results may vary

Disclaimer: Nothing beyond this point fixes the #87 error. This just makes the VPN connection visible on the login screen. I am still trying to find where the global phone book is located so I can share it

First, I deleted the existing VPN connection

Next, using an elevated (running as Administrator) PowerShell command prompt, I ended up running this command to create the connection:

Add-VpnConnection -name (Name) -ServerAddress (Address) -AllUserConnection $true -TunnelType L2tp -AuthenticationMethod MSChapv2 -EncryptionLevel Required -SplitTunneling $true

Next, I edited it in Settings > Network Status > Network and Sharing Center > Change adapter settings to match my desired connection settings

To view the settings in PowerShell, you need run the following command:

Get-VpnConnection -AllUserConnection

To make changes using PowerShell, you will also need to add -AllUserConnection to the command

For example:

Set-VpnConnection -AllUserConnection -Name (Name) -SplitTunneling $true

As a side-note, you do not need to share the connection for it to show up on the login screen


Friday, February 7, 2020 6:54 PM

This isn't a bug in service, this error means you have maybe a misconfigured policy, for example a policy condition with a mandatory parameter like User Group stablished with an incorrect value.