Always On VPN - Device Profile cannot be removed/deleted.

Question

_{Friday, October 26, 2018 5:15 PM | 1 vote}

I have a Microsoft Surface that has a device tunnel profile installed. We are trying to remove it but it refuses to let us remove it claiming that it is connected.

It is not connected.

The adapter shows disconnected, the connectionstatus of the profile in powershell says disconnected, the RRAS server shows no connection for it etc..

When you try to remove it with get-vpnconnection -alluserconnection | remove-vpnconnection it claims it can't because it is connected.

I have tried rasdial "profile name" /DISCONNECT, rasphone -h and -r, a reboot... nothing we try allows for the profile to be removed.

How can I force this profile to be removed???

All replies (5)

_{Tuesday, October 30, 2018 5:51 AM ✅Answered}

You should be able to remove it manually from legacy Control Panel \ Connections etc.

MCSE Mobility 2018. Expert on SCCM, Windows 10 and MBAM.

_{Tuesday, October 30, 2018 1:19 AM}

Hi,

No more resources are available for reference.

If this issue is urgent, our suggestion is you submit a service request to MS Professional tech support service so that a dedicated Support Professional can give more rapid support. You can find the phone number in the following link.

http://support.microsoft.com/gp/customer-service-phone-numbers/en-us  

Best  regards,

Travis

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Sunday, November 11, 2018 1:02 PM}

Any help?

https://directaccess.richardhicks.com/2018/03/12/deleting-an-always-on-vpn-device-tunnel/

Ian Burnell, London (UK)

_{Monday, November 12, 2018 9:49 PM}

Unfortunately not.

It seems to be completely screwed up. I can't delete it in any way.

I was thinking of finally using something like devcon or netsh but I am not sure how to delete the interfaces that use the WAN miniport IKEv2 manually via any command line.

_{Wednesday, December 18, 2019 5:35 AM | 1 vote}

this is my first post -

the best first step would be to run the following powershell as Administrator or more 

but the Simplest solution in these cases is to remove the pbk file from the global phone book Location

naming conventions may differ but default phonebook file is named rasphone.pbk

this is located in 

%programdata%\Microsoft\Network\Connections\Pbk

which in standard installations of windows 10 points to C:\ProgramData\Microsoft\Network\Connections\Pbk

Delete the file ( or move to alternate location for backup ) 

the alternative is the following powershell commands which must be run AS the SYSTEM 

(to run as the SYSTEM account you must use either a scheduled task ( or group policy startup or shutdown script ) OR utilize psexec to create a new powershell session running as system context 

$namespaceName = "root\cimv2\mdm\dmmap"
$className = "MDM_VPNv2_01"
$session = New-CimSession
$options = New-Object Microsoft.Management.Infrastructure.Options.CimOperationOptions

$deleteInstances = $session.EnumerateInstances($namespaceName, $className)

 foreach ($deleteInstance in $deleteInstances){
$InstanceId = $deleteInstance.InstanceID
$session.DeleteInstance($namespaceName, $deleteInstance)
}
however this powershell method is not alwayse succesfull and the deletion of the phone book is more reliable 

you may need to restart the IKEEXT and rasman service after this is done to avoid error 809