The culprit behind the issue is attributed to the April security update
A recent Windows security update is causing some VPN connections to fail, Microsoft has confirmed, and the company is actively working on a solution.
The KB5036893 update, also known as the April security update, was initially released on April 9, 2024. Following its widespread deployment across numerous PCs, Microsoft has acknowledged the unintended impact it’s having on virtual private networks. This issue is resulting in some VPNs failing to establish connections altogether, potentially leaving users without the ability to conceal their IP addresses or alter their online locations.
Further details regarding the nature of the problem are currently limited to Microsoft’s updates on its Windows 11 issues page.
Microsoft said on their page: “Windows devices might face VPN connection failures after installing the April 2024 security update (KB5036893) or the April 2024 non-security preview update,” Microsoft says. “Next steps: We are working on a resolution and will provide an update in an upcoming release.”
The issue impacts Windows 11 (versions 23H2, 22H2, and 21H2) and Windows 10 (versions 22H2 and 21H2).
Checking the Windows 11 subreddit, which typically identifies common OS issues promptly, I don’t observe many reports of the problem. However, it’s the type of issue that you might not associate with Windows unless you’re aware that Microsoft has acknowledged it. If you’re encountering connectivity difficulties, it appears necessary to attempt uninstalling this package. Microsoft provides the following guidance on how to proceed:
“To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.
“Running Windows Update Standalone Installer (wusa.exe) with the /uninstall switch on the combined package will not work because the combined package contains the SSU. You cannot remove the SSU from the system after installation.”
Another option is to determine whether your router and VPN provider facilitate running a VPN directly through the router, eliminating the need for Windows to be cognizant of the connection altogether. While this approach may seem somewhat drastic to some, it can be a viable solution if circumstances demand it.