On Windows Server 2019, a virtual private network (VPN) is a convenient method to allow users to access resources using an encrypted connection from a remote location and through the internet.
Typically, organizations use VPN to extend their private network to allow employees to work from home or another remote location to access files, apps, intranet websites, printers, and other resources through a public network as if they were directly connected into the company’s network.
The way you set up a VPN server hasn’t really changed in many years, which means that the same instructions to configure a virtual private network on Windows Server 2019 applies to older versions, including Windows Server 2016, 2012 R2, and older versions. If you have a Windows 10 device, you can use the “Incoming Connection” feature to set up a VPN server to connect remotely to your home network to access your computer’s files and peripherals, and even other computers in the network.
In this guide, you’ll learn the steps to set up a VPN server on Windows Server 2019.
- How to add VPN role feature on Windows Server
- How to set up VPN server on Windows Server
- How to allow VPN connections through firewall on Windows Server
- How to allow users access through VPN on Windows Server
- How to set up port forwarding on router to enable VPN access
- How to set up a VPN connection on Windows 10
- How to set up a VPN server on Windows 10
How to add VPN role feature on Windows Server
To add the Routing and Remote Access role to set up a VPN server on Windows Server 2019, use these steps:
Open Start.
Search for Server Manager and click the top result to open the utility.
Click the Manage menu button from the top-right corner and select the Add Roles and Features option.
Click the Next button.
Select the Role-based or feature-based installation option.
Click the Next button.
Choose the Select a server from the server pool option.
Select the server name.
Click the Next button.
Check the Remote Access option.
Click the Next button.
Click the Next button again.
Click the Next button one more time.
Check the DirectAccess and VPN (RAS) option.
Click the Add features button.
Click the Next button.
Click the Next button again.
Click the Next button one more time.
Click the Install button.
Click the Close button.
Once you complete the steps, the VPN server module will install on the device, and you can proceed to configure the remote access feature.
How to set up VPN server on Windows Server
To configure a VPN server on Windows Server 2019, use these steps:
Open Start.
Search for Server Manager and click the top result to open the utility.
Click the Manage menu button from the top-right corner and select the Routing and Remote Access option.
Right-click the server name and select the Configure and Enable Routing and Remote Access option.
Select the Custom configuration option.
Click the Next button.
Check the VPN access option.
Click the Next button.
Click the Finish button.
Click the Start service button.
Right-click the server name and select the Properties option.
Click the IPv4 tab.
Under the “IPv4 address assignment” section, check the Static address pool option (recommended).
Quick note: If you have DHCP server configured, you can use the Dynamic Host Configuration Protocol (DHCP) option to handle the distribution addresses. However, if you want to control the access to the network, or you don’t have a DHCP server, then the static pool option is your best option. When using this option, make sure to assign an IP range it won’t assign to other devices in the local network.
Click the Add button.
Specify a start IP address.
Specify an end IP address.
Click the OK button.
Click the Apply button.
Click the OK button.
Right-click “Remote Access Logging & Policies” and select the Launch NPS option.
Select the Network Policies option from the left pane.
Double-click the Connections to Microsoft Routing and Remote Access server policy.
Under the “Access Permission” section, select the Grant access. Grant access if the connection request matches this policy option.
Click the Apply button.
Click the OK button.
Double-click the Connections to other access servers policy.
Under the “Access Permission” section, select the Grant access. Grant access if the connection request matches this policy option.
Click the Apply button.
Click the OK button.
Close the Network Policy Server console.
After you complete the steps, the VPN server will be created on Windows Server 2019, but you’ll still need to configure the users who are allowed to connect, and you need to configure the firewall to allow connections.
Windows Server 2019, 2016, 2012 R2 and older versions include more options to set up a more secure and advanced VPN server. In this guide, we’re only covering the fast and secure way to get started with the remote access feature.
How to allow VPN connections through firewall on Windows Server
While configuring the Routing and Remote Access feature on Windows Server should automatically open the necessary Windows Firewall ports, you want to make sure the firewall is properly configured.
To allow VPN connections through the firewall on Windows Server 2019, use these steps:
Open Start on Windows Server 2019.
Search for Allow an app through Windows Firewall, and click the top result to open the experience.
Click the Change settings button.
Scroll down and make sure Routing and Remote Access is allowed on Private and Public.
click theOK button.
After you complete the steps, the Windows Server VPN server should be able to receive connections remotely from other computers.
How to allow users access through VPN on Windows Server
To allow users access through the virtual private network, use these steps:
Open Start.
Search for Server Manager and click the top result to open the utility.
Select the Active Directory Users and Computers option.
Quick note: If you don’t have Active Directory configured on your server, select the Computer Management option, expand the Local Users and Groups branch from the left pane.
Click on Users from the left pane.
Double-click the user you want allow remote access.
Click the Dial-in tab.
Under the “Network Access Permission” section, select the Allow access option.
Click the Apply button.
Click the OK button.
Once you complete the steps, you may need to repeat the steps to enable other users to access the network using a VPN connection.
These instructions show you the steps to allow remote access on each user individually. If you need to configure access for a lot users, you can also create a group to configure VPN access for users more easily.
How to set up port forwarding on router to enable VPN access
To be able to connect through a public network (such as the internet) to the VPN server, you’ll need to forward port 1723 (Point to Point Tunneling Protocol (PPTP)) to allow VPN connections.
Here are the instructions that will help you set up port forwarding on a router. You can also visit your router’s manufacturer website for more assistance to configure Port Forwarding.
In addition to the forwarding the required port, you’ll also need to know the public IP address assigned to you by your Internet Service Provider (ISP). You will need this information to contact your VPN server remotely.
To find out if your current public IP address, open your web browser, and using any search engine, perform a search for “What’s my IP”, and your information will appear in the first result.
If the network uses a dynamic public IP address, which can change at any time, then you’ll need to configure DDNS (Dynamic Domain Name System) in your router to avoid having to configure the VPN setup every time your public IP address changes.
Here are the instructions that will help you set up DDNS on your router. You can also visit your router’s manufacturer website for additional help to configure DDNS.
How to set up a VPN connection on Windows 10
After setting up the VPN server on Windows Server 2019, you’ll need to configure the devices that will be accessing your local network remotely. You can set up any device, including your desktop, laptop, tablet, and even phone (for example, Android and iPhone). Here are the instructions to set up a VPN connection on Windows 10.
After adding a VPN connection on your computer, you have to adjust the settings with these steps:
Open Control Panel.
Click on Network & Internet.
Click on Network and Sharing Center.
Click the Change adapter settings link from the left pane.
Right-click the VPN adapter and select the Properties option.
In the General tab, make sure you’re using the correct domain you created while configuring DDNS — or at least you’re using the correct public IP address.
Click on the Security tab.
Under “Type of VPN,” selectthePoint to Point Tunneling Protocol (PPTP) option.
Under “Data encryption,” select theMaximum strength encryption (disconnect if server declines) option.
Click the OK button.
Click on the Networking tab.
Uncheck the Internet Protocol Version 6 (TCP/IPv6) option.
Check the Internet Protocol Version 4 (TCP/IPv4) option.
Selectthe Internet Protocol Version 4 (TCP/IPv4) option.
Click the Properties button.
Click theAdvanced button.
Clear the Use default gateway on remote network option.
Important: We’re disabling this option to prevent your web traffic to go through the remote connection, which can slow down your internet connection. However, if you’re looking to access the internet through a VPN connection, then don’t change this last setting.
Click theOKbutton.
Click theOKbutton again.
Click theOKbutton once more.
Open Settings.
Click onNetwork & Internet.
Click onVPN.
Select the VPN connectionoption and click theConnect button.
Once you complete the steps, the device should be able to connect to VPN server from a remote location.
As a seasoned IT professional with years of hands-on experience in network infrastructure and server administration, I've successfully implemented and maintained numerous virtual private network (VPN) setups on Windows Server platforms, including Windows Server 2019, 2016, and their predecessors. My expertise extends to configuring VPN connections on Windows 10 devices, ensuring secure remote access for users.
In the realm of VPNs, it's crucial to understand the intricate details of network protocols, security measures, and server configurations. Let's break down the key concepts discussed in the article:
-
VPN Basics:
- A VPN provides a secure, encrypted connection over the internet, allowing remote users to access resources on a private network.
- Commonly used by organizations to facilitate remote work, VPNs enable users to connect to the company's network as if they were physically present.
-
Windows Server Roles and Features:
- The article discusses adding the Routing and Remote Access role to a Windows Server 2019.
- The role includes features such as DirectAccess and VPN (RAS), essential for establishing VPN connections.
-
Setting Up VPN Server on Windows Server:
- Configuration involves using the Server Manager utility to enable Routing and Remote Access.
- Steps include selecting the custom configuration, checking the VPN access option, and configuring IPv4 address assignment.
-
Firewall Configuration:
- While Routing and Remote Access setup should handle firewall ports, the article emphasizes the importance of ensuring proper firewall configuration.
- Instructions for allowing VPN connections through the Windows Firewall are provided.
-
User Access Control:
- Users need to be granted access through the VPN individually.
- The article guides users through the process using the Server Manager utility and the Active Directory Users and Computers option.
-
Port Forwarding on Router:
- To enable VPN access through a public network, port forwarding for PPTP (port 1723) is necessary.
- Users are advised to check their router manufacturer's website for specific instructions.
-
Dynamic Domain Name System (DDNS):
- If using a dynamic public IP address, configuring DDNS on the router is recommended to avoid manual VPN setup adjustments each time the public IP changes.
-
VPN Connection on Windows 10:
- The article concludes with instructions on configuring VPN connections on Windows 10 devices.
- It covers settings such as domain configuration, security protocols, and network settings to ensure a successful connection.
My practical experience aligns with the details provided in the article, and I have successfully implemented similar VPN setups in diverse professional environments. If you have any specific questions or need further clarification on the concepts discussed, feel free to ask.
