Microsoft has included a fix for Windows 11’s Always On VPN connection failures in the October 28 preview update, KB5127936. The problem began after the September 2026 security updates and could leave enterprise VPN connections stuck on “Connecting” or prevent them from reconnecting after an initial attempt failed. Microsoft lists the repair in the release notes for Windows 11 versions 25H2 and 26H2.
The issue affected VPN profiles configured to use automatic protocol selection or protocol fallback between IKEv2 and SSTP. In some cases, a failed first connection attempt was followed by an error saying the specified port was already in use. Microsoft had previously marked the problem as resolved after its October 13 updates, but removed the fix entry on October 20. The change is recorded in the October 13 update notes, while the newer KB5127936 support page lists the repair.
Administrators running Windows 11 25H2 or 26H2 can install the optional preview update to receive the fix before the next regular monthly release. Organizations that prefer to wait can use Microsoft’s temporary workaround by changing affected VPN profiles from automatic protocol selection to a single protocol, either SSTP or IKEv2, based on their network configuration and security requirements.
The update is listed for Windows 11 25H2 and 26H2. Microsoft says Windows 11 version 24H2 no longer receives non-security preview updates, so KB5127936 should not be treated as a preview fix for that release. The VPN issue adds to other problems reported after the September Windows updates, including a separate File History backup issue that Microsoft addressed earlier.



