The Always On VPN Dynamic Profile Configurator (DPC) is a free, open-source solution for deploying and managing Always On VPN client configuration settings using Active Directory and Group Policy or Microsoft Intune. It extends what’s possible with native deployment methods such as Intune VPN profiles, custom XML, and PowerShell scripts, and it makes advanced configuration easier to deploy, manage, and maintain.
Last updated: November 9, 2026
What is DPC?
DPC began life as a commercial product. Its lead developer, my good friend Leo D’Arcy, retained the source code and released it as open source in December 2024, starting with version 5.0. DPC consists of a lightweight client service that builds and maintains Always On VPN profiles on each endpoint, along with administrative templates that define its settings. The source code and releases are available on GitHub.
Why Use DPC?
Microsoft designed Always On VPN to be deployed and managed with Intune, and that remains a great option. However, many organizations still manage their endpoints with Active Directory and Group Policy, and Windows has no native Group Policy settings for Always On VPN. Deploying a PowerShell script and XML file with a startup script or Configuration Manager works, but administrators must build and maintain the XML by hand and manage every configuration change after deployment. DPC solves this with Group Policy settings for Always On VPN and a client that applies changes automatically. Organizations using Intune benefit too, because DPC works with Intune and supports settings that native Intune VPN profiles don’t.
Features
DPC includes many settings that aren’t available with Intune or XML alone. Here’s a sample of what DPC can configure.
- VPN strategy, including protocol preference and fallback
- Interface and route metrics
- Dynamic exclusion of Microsoft 365 and custom domains from the VPN tunnel
- Routes and exclusion routes defined by hostname
- IKE mobility settings for improved roaming
- IPv6 routes
- PEAP and EAP-TLS authentication
- Profiles deployed in the all users context, which avoids problems on shared devices
- Optional event logging to disk and delayed profile updates for reliability
For more details, see Always On VPN DPC Advanced Features.
What’s New
DPC is actively maintained. The current release is version 5.4.1, a maintenance release that includes the following changes.
- Empty hidden phonebook (hiddenPBK) files are now deleted when a profile is updated, which avoids rare profile installation problems
- Rebuilt release pipelines that support automated releases, paving the way for distribution through channels such as Chocolatey and Winget
- A corrected README file included with the installer
Version 5.4.1 builds on version 5.4.0, released in May 2026, which introduced the following improvements.
- Digitally signed binaries, including the installer, for easier deployment alongside application control
- EAP-TLS as an authentication option, alongside PEAP
- Improved profile change comparison and a new logo
- DPC administrative templates (ADMX) now publicly available on ADMScope
Getting Started
Getting started with DPC takes just a few steps.
- Download the latest client and administrative templates from the DPC releases page on GitHub.
- Configure DPC settings with Group Policy, or with Intune as described in Always On VPN DPC with Intune.
- Deploy the DPC client to your endpoints.
- If you’re running a previous commercial release, follow Migrating from Always On VPN DPC Commercial to Open Source.
Video Demonstration
Here’s a short video introduction and demonstration of Always On VPN DPC.
Community and Support
DPC has an active community, and support is available in the following ways.
- Discord. Ask questions and join the conversation on the Always On VPN Discord channel.
- GitHub. Report bugs and request features on the DPC issues page.
Commercial Support
Many organizations require formal support before they can deploy software, even open-source solutions. Leo D’Arcy and I offer a commercial support option for DPC that includes the following.
- One year of support services (renewable)
- Direct access to Leo D’Arcy, lead developer of DPC
- Support from me for DPC-related questions
- Enhanced troubleshooting beyond community channels
- Prioritized bug fixes and early consideration for feature requests
- Dedicated private channels for secure communication
To learn more, email [email protected] or use the form below.
Additional Information
Always On VPN DPC v5.4.1 Release Notes (GitHub)
Migrating from Always On VPN DPC Commercial to Open Source
What’s New in Always On VPN DPC v5.4.0
Always On VPN DPC 5.2.0 Now Available
Always On VPN DPC Advanced Features
Always On VPN DPC Commercial Support
Always On VPN Demonstration Videos (YouTube)
Learn More
Interested in a DPC demonstration, help migrating from a previous release, or commercial support? Fill out the form below, and I’ll follow up, typically within one business day.
