> ## Content Index
> Fetch the complete content index at: https://blog.harshkohli.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Microsoft Fixes Windows 11 Always On VPN Bug
- URL: https://blog.harshkohli.com/windows-11-always-on-vpn-fix-kb5127936/
- Published: 2026-10-30T15:05:52.000Z
- Updated: 2026-11-03T09:42:54.000Z
- Description: KB5127936 finally fixes Always On VPN connections stuck on Connecting after September Windows 11 updates. Here is how to fix it now.
- Author: Harsh Kohli
- Tags: Tech News, Windows

Microsoft has finally fixed the Always On VPN bug that the September Windows 11 security updates caused. The fix is in this month's optional preview update, KB5127936, so if your work VPN has been stuck on "Connecting" for weeks, there's now a real way out.

## What happened

Always On VPN is the tool many companies use to keep work laptops connected to their office network automatically. After the September 2026 updates, it started breaking on Windows 11 machines whose VPN profile let Windows pick the protocol on its own (IKEv2 with SSTP as the fallback). Connections would hang at "Connecting" or fail after a first failed attempt, and later tries could show "The specified port is already in use."

Here's the annoying part. Microsoft had earlier listed the bug as fixed in the October cumulative update, then quietly removed that note on October 20\. Now the [KB5127936 release notes](https://support.microsoft.com/en-us/servicing/os/windows-11/2026/10/kb5127936-windows-11-25h2-26h2-update?ref=blog.harshkohli.com) confirm the fix for real, for Windows 11 versions 25H2 and 26H2\. I spotted it through [BleepingComputer on X](https://x.com/BleepinComputer/status/2116128145006801304?ref=blog.harshkohli.com), and [their report](https://www.bleepingcomputer.com/news/microsoft/microsoft-finally-fixes-vpn-issues-caused-by-september-updates/?ref=blog.harshkohli.com) has Microsoft's full statement.

The same update also fixes Remote Desktop failing for non-admin users when the Administrator protection feature is on, which showed error 0xC000000D.

## Why it matters

For anyone working remotely, a VPN that won't connect means no access to work files, internal apps or email. Plenty of people have spent the last month restarting laptops and filing tickets over this. The mix-up in October made it worse, because some IT teams thought the problem was already handled.

Keep in mind that preview updates are optional and don't include security patches. Since Microsoft stopped sending preview updates to version 24H2 this month, 24H2 machines won't get this fix early.

## What to do

- If you're on 25H2 or 26H2 and hit this bug, install KB5127936 from Settings, Windows Update. It's rolling out gradually, so it may not show up for everyone at once.
- If you'd rather wait, the fix should arrive with the November Patch Tuesday update on November 10.
- IT admins can use Microsoft's workaround in the meantime: switch the Always On VPN profile from automatic protocol selection to a single protocol, either SSTP only or IKEv2 only, whichever suits your setup. This is also the route for 24H2 devices.

This is the same preview update that brought [faster Edge app launches](https://blog.harshkohli.com/edge-accelerated-app-launches-windows-11/). And if Windows Update itself gets stuck, my [Windows Update fix guide](https://blog.harshkohli.com/windows-update-stuck-fix/) should help. The same October preview also unlocked a grayed-out Smart App Control toggle — see [Smart App Control grayed out fix](https://blog.harshkohli.com/smart-app-control-grayed-out-fix/).

That same October 28 preview also introduced [Windows 11 Cloud Rebuild](https://blog.harshkohli.com/windows-11-cloud-rebuild-no-usb/) — a no-USB reinstall from Windows Update that can run even when Windows won’t boot.