Configuration of always on VPN on client machine without domain join

[Guest Ros999]

hello, I have configured always on VPN ,for that i have created three server (Windows server 2016) :ADDS,VPN server and Network policy server.My always on vpn is configured with IKEv2 protocol.I have applied policy for autoenrollment of certificate to the client machine.my always on vpn is working properly.My policy is applied only when my client machine is joined to domain.I ran the powershell script VPN_Profile.ps1 to configure always on VPN on the client machine.Always on vpn made the connection only when user certificate and computer certificate are available on client machine.

 

My question is everything works fine when client machine is joined to domain.Is there any method to enroll certificate to user and computer without joining domain?

 

Is there any method or script to configure alway on vpn without joining domain for client machine?

 

Continue reading...