---
locale: "en"
updated_at: "2026-06-10T07:09:53.226Z"
canonical: "https://www.isdecisions.com/en/userlock/docs/guides/installation/install-userlock-vpn-connect"
---

# Installing Userlock VPN Connect

Install and configure manually or by GPO.

## Overview

UserLock VPN Connect is a lightweight client utility that improves VPN logon experience and MFA reliability for Windows users.

For more details, read the [UserLock VPN Connect reference](/userlock/docs/reference/modules/userlock-vpn-connect).

## Requirements

Before deploying UserLockVPN Connect, ensure the following:

- A **Windows VPN connection** is already configured.
- The **UserLock Desktop Agent** is installed on protected computers.

If you plan to [apply MFA to VPN connections](/userlock/docs/guides/mfa-implementation/vpn-mfa), then you must also install:

- [UserLock Anywhere](/userlock/docs/reference/server-settings/general#userlock-anywhere) to allow communication between remote computers and the UserLock service.
- [UserLock IIS MFA](/userlock/docs/reference/server-settings/mfa-settings#mfa-for-websites-on-iis-servers) to handle MFA prompts and enrollment.

💡 These components are only required if you enable MFA for VPN logons.

## Step 1. Install VPN Connect

1. On the **UserLock server**, locate the installer file:
  `C:\Program Files (x86)\ISDecisions\UserLock\UserLock.VPN.Connect.msi`
2. Deploy the `.msi` file to end-user computers:
  - **Manually**, by running the installer on each computer, or
  - **Automatically**, using standard software deployment tools or Group Policy software installation.

After installation, the **UserLock VPN Connect** application becomes available from the Windows **Start menu**.

## Step 2. Configure Settings

Configuration can be managed either centrally via **Group Policy** or locally by the user (if permitted).

### Option A – Configure via Group Policy (recommended)

You can predefine all VPN Connect settings using the **Administrative Template** provided with UserLock.

1. Locate the Group Policy template file:
  `C:\Program Files (x86)\ISDecisions\UserLock\VpnConnect.adm`
2. Open the **Group Policy Management Console (GPMC)**.
3. Add the template to the GPO applied to your target computers.
4. In the Group Policy Editor, navigate to:
**Administrative Templates → UserLock → VPN Connect**
*(Use “Classic Administrative Templates” on Windows Server 2008 and later.)*

![](https://a.storyblok.com/f/122374/783x562/4dfefce1f3/group-policy-management-editor-vpn-connect-template.png)

Once configured, these settings will be automatically applied to all users in the selected OU or GPO scope.

### Option B – Configure manually

If you do not use Group Policy, administrators or users can configure VPN Connect directly through the application interface.

When opening **UserLock VPN Connect** for the first time, the configuration page allows entering:

- The **VPN connection name**
- The **domain name**
- The **MFA probing URL**: based on the URL of UserLock Anywhere, using the "Probing" subfolder. Example: http://Server1.MyDomain.intra/ulproxy/Probing
  Please ask your admin to provide this link.

These settings can be modified later as needed.

## Step 3. Verify the setup

After configuration, verify that:

- ✅ The VPN Connect application opens without errors.
  ![Windows VPN account credentials](https://a.storyblok.com/f/122374/332x490/8af5ecd8cf/windows-vpn-account-credentials.png)
- ✅ The configured VPN connection appears correctly in the list.
- ✅ The UserLock service can reach the workstation through the VPN session.