DPC

KO | EN

gitlite — search

#hacktoberfest #ai #typescript #llm #go #android #machine-learning #rust #deep-learning #linux #java #kubernetes #awesome-list #ios

(★ 42)

The new home for DPC

DPC Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# What is DPC?
Microsoft AOVPN is a VPN technology backed into Windows 10 and 11. It enables a (mostly) seamless connection either from boot or from login, enabling users to forget about remote connectivity and concentrate on their jobs.

AOVPN can be managed natively within Windows using an XML configuration which is then 'injected' into the Windows Configuration Service Provider (CSP). This is clunky, error prone and doesn't scale well or enable profile upgrades

Microsoft provide an configuration interface for Intune however this has its own issues including bugs, missing features and license requirements.

DPC attempts to solve these issues with features including:
- Support for Active Directory GPOs
- Built-in support for configuration changes
- Error checking and profile misconfiguration identification
- Limited FQDN resolution
- Dynamic support for excluding M365 IPs in Force Tunnel
- Monitoring of VPN State
- Old VPN Profile Cleanup
- Documentation for all settings

## Need Commercial Support?

If your organisation in looking for the assurance of support for such a key component please reach out to dpc@darcy.org.uk

Our support packages typically include:
- 1 Year of support services with options for renewal
- Direct communication with the Lead Developer (Leo D’Arcy)
- Enhanced troubleshooting and support over public offerings
- Prioritized bug resolution
- Prioritized consideration for new feature requests
- Dedicated and private support channels
- Continue to support the ongoing development and maintenance of the product

## Personal Support

While the best way to support the ongoing development of DPC is to purchase a commercial support package (or directly contribute to the code base), some people have reached out asking for ways they can show their appreciation directly.

I've set up Buy me a coffee for anyone who would like to show their appreciation for the work that has gone into DPC.

While I would very much appreciate any support and would be eternally grateful for any contributions, please do not feel obliged to do so.

## Questions?

Hang out and chat with us on the [MS Remote Access UG](https://discord.gg/qzgajr9Dev) Discord server if its a more general question or AOVPN related.

If you've got a specific issue or a feature request please create an issue in Github to enable easier tracking

# DPC Setup/Installation
- Download the latest DPC Installer from [here](../../releases/latest)
- Grab the ADMX files from [here](DPCInstaller/ADMX) and add to AD/Intune
- Copy settings from existing AOVPN profile into the configuration GPO/Profile
- Deploy configuration to end clients
- Install DPC client on all end devices (Simple MSI with no attributes)

# Troubleshooting
Please see the separate guide [here](Troubleshooting.md)

## Migration from PowerON DPC for AD Users
# DPC
This repo replaces the PowerON Platforms AOVPN DPC Client with a new, open source and free to use version.

- Download new ADMX files from [here](DPCInstaller/ADMX)
- Add new ADMX files to Domain Controllers, ADMX Central store and client where Migrate-DPCConfig.ps1 will be run from
- Create new GPO and Link to same Locations as previous GPO
- Run Migrate-DPCConfig.ps1 from [here](DPCManagement/Scripts/Migrate-DPCConfig.ps1)
- Review and Migrate any non-DPC settings in GPO
- Upgrade DPC to Version 5+
- Remove old GPO
- Remove old ADMX Files

Please note that this script will not delete any previously added settings as such it is strongly recommended that an empty GPO is used

## Migration from PowerON DPC for Intune Users

Unfortunately there is no easy way to copy an existing Configuration policy and update it in Intune, as such it is recommended that the new ADMX files are imported and settings are manually copied over.

# RRAS Monitoring Solution

DPC is proud to be the current hosting location for a new RRAS monitoring solution initially written by ChrisAtWork on Discord! Please feel free to download from [here](DPCManagement/RRASReport/Get-RRASReport.ps1) and please do contribute to the ongoing development, either by raising a pull request or by discussing it on Discord [MS Remote Access UG](https://discord.gg/qzgajr9Dev)

This script is very much in development so please take care and people to actively maintain and develop it would be greatly appreciated

## Prerequisites

- Domain Joined RRAS Servers
- WinRM Connectivity between the host and RRAS Servers
- IIS installed and configured

# Release Notes

## Version 5.4.0
- Signed DPC Binaries and Installer using publicly trusted code signing certificate
- Added EAP-TLS support (in addition to the default PEAP-EAP-TLS), big thanks to @MartijnSnijder for this PR
- Updated installer assets to use new logo
- Installed profiles will default to using a CSP export for comparison to proposed profiles and will fall back to WMI/PBK comparison if the CSP export fails for any reason
- ADMX files are now publicly accessible through [ADMScope](https://admscope.com/admx/Always_On_VPN_DPC/en-US)
- Fixed typo in Event Log Message Name

## Version 5.3.0
- Added support for IPv6 Office 365 Exclusion Routes
- Re-worked profile route management engine to only configure compatible exclusion routes based on current device network configuration
- Profile is now validated and potentially regenerated whenever a network change is detected
- Improved service shutdown logic in the event of device restart

## Version 5.2.2
- Updated Proxy examples in ADMX files
- Fixed incorrect Proxy Exceptions option for User Backup Tunnel in ADMX files
- Fixed potential null pointer exception when using proxy exclusions
- Fixed issue where an & in the profile would break profile ingestion
- Improved IPv4 and IPv6 validation, big thanks to @ryannewington for this PR

## Version 5.2.1
- Fixed issue where DPC would not exit correctly
- Updated Profile management logging to show additional information in rare circumstances

## Version 5.2.0
- Added Option to write Event Logs to Disk
- Added Support for excluding Resolved DNS IPs from a VPN Profile
- Added up to 10 second delay in profile updates after Group Policy updates have been detected to avoid profiles being updated simultaneously
- Fixed bug where DNS Route resolution with the same IP addresses would cause the resolution to fail
- Fixed issue where Operational logs wouldn't show in Event Viewer
- Fixed issue where Disable UI Edit and Disable UI Disconnect would cause a profile mismatch warning even when set correctly
- Fixed issue where a single failure in DNS resolution would break DNS resolution for all DNS entries in a profile
- Updated help files to clarify some settings and limitations
- Updated comments for DNS Resolution to make it easier to understand which routes apply to which DNS entries
- Updated Debug logs to show why a profile isn't considered identical prior to the profile update

## Version 5.1.0
- Added detection and removal for corrupted hiddenPBK files

## Version 5.0.3
- Improved error logging
- Added Trusted Network detection validation for unicode letters
- Reverted IPv6 support when excluding M365 traffic due to issues connecting after these routes where added

## Version 5.0.2

- Disabled Register DNS on the user tunnel if already configured on the device tunnel
- Updated ADMX wording to clarify a couple of settings
- Added IPv6 support when excluding M365 traffic
- Made Trusted Network detection validation more permissive
- Fixed issue where Override XML would set MTU to be 0

## Version 5.0.1

- Ignore null values in registry settings
- Added support for <EMPTY> value in ADMX settings which have optional values
- Allow RasMan to restart if the Device Tunnel is still operational
- Added additional events for troubleshooting
- Debug installer now installs Debug Symbols for additional information

## Version 5.0.0

- Removed Product Key and Trial Subsystems
- Updated EULA
- Updated License
- Removed references to PowerON Platforms
- Open Sourced Application
- (Breaking Change) Changed Event Log Location
- (Breaking Change) Changed Registry Location
- (Breaking Change) Make Full Monitoring Mandatory
- (Breaking Change) Removed Unsupported Domain Name Information Setting on Machine Tunnel

# Development

With the release of DPC as an open source product additional Contributors are greatly welcomed!

Please take a look through the information [here](DEVELOPMENT.md) and raise an issue if you've got an idea or would like to get involved

# Special Thanks
DPC would not have been possible without the following people

- My Amazing Wife Christine
- The entire team at PowerON
- Richard Hicks
- Philipp Kuhn

DPC

DPC Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

DPC

DPC Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README