Installing Userlock VPN Connect

UserLock VPN Connect is a lightweight client utility that improves VPN logon experience and MFA reliability for Windows users.

For more details, read the UserLock VPN Connect reference.

Before deploying UserLockVPN Connect, ensure the following:

• A Windows VPN connection is already configured.

• The UserLock Desktop Agent is installed on protected computers.

If you plan to apply MFA to VPN connections, then you must also install:

• UserLock Anywhere to allow communication between remote computers and the UserLock service.

• UserLock IIS MFA to handle MFA prompts and enrollment.

💡️ These components are only required if you enable MFA for VPN logons.

1. On the UserLock server, locate the installer file:

   C:\Program Files (x86)\ISDecisions\UserLock\UserLock.VPN.Connect.msi

2. Deploy the .msi file to end-user computers:

   • Manually, by running the installer on each computer, or

   • Automatically, using standard software deployment tools or Group Policy software installation.

After installation, the UserLock VPN Connect application becomes available from the Windows Start menu.

Configuration can be managed either centrally via Group Policy or locally by the user (if permitted).

You can predefine all VPN Connect settings using the Administrative Template provided with UserLock.

1. Locate the Group Policy template file:

   C:\Program Files (x86)\ISDecisions\UserLock\VpnConnect.adm

2. Open the Group Policy Management Console (GPMC).

3. Add the template to the GPO applied to your target computers.

4. In the Group Policy Editor, navigate to:
   Administrative Templates → UserLock → VPN Connect
   (Use “Classic Administrative Templates” on Windows Server 2008 and later.)

Once configured, these settings will be automatically applied to all computers in the selected OU or GPO scope.

If you do not use Group Policy, administrators or users can configure VPN Connect directly through the application interface.

When opening UserLock VPN Connect for the first time, the configuration page allows entering:

• The VPN connection name

• The domain name

• The UserLock URL (provided by the admin)

These settings can be modified later as needed.

After configuration, verify that:

• ✅️ The VPN Connect application opens without errors.

  

• ✅️ The configured VPN connection appears correctly in the list.

• ✅️ The UserLock service can reach the workstation through the VPN session.