Connect with us

Hi, what are you looking for?


How to install a VPN on Windows Server 2019

How to install a VPN on Windows Server 2019


This blog post is a step-by-step guide on how to install and configure a VPN on Windows Server 2019. This blog post shows you how you can easily set up a VPN server for a small environment, branch office, or for a hosted server scenario. A VPN (Virtual Private Network) server allows you to connect from remote clients or firewalls to a Windows server.

I’ve already made a similar post for other versions of Windows

To install VPN access to Windows Server 2019, just follow this step-by-step guide:

Install the remote access role

First, install “remote accessVia Server Manager or PowerShell.

Open Server Manager and select Add roles and features

select file remote access Next turn and click through the wizard.

In the Role Services step, select File Direct Access and VPN (RAS)

In the last step, select Installations To install a remote access role.

This may require a server restart.

Install and configure VPN on Windows Server 2019

After successful installation, you can now start the wizard to install and configure a VPN server in Windows Server 2019.

After you install the features, which may take some time to finish, you see the Getting Started Wizard link. Click “Open the Getting Started Wizard“.

This opens a new wizard that will help you configure the server. On the first screen, select “Post VPN only“.

This opens Routing and Remote Access management console

Right click on the server name and click on β€œConfigure and enable Routing and Remote Access“.

In the new wizard, select “custom configuration“.

Choose “VPN access“.

After clicking Finish, you can now Start the Routing and Remote Access service.

Configure VPN and network access users

If you have a firewall between the Internet and your Windows server, you must open the following firewall port, and forward it to your Windows server:

For PPTP: 1723 TCP and Protocol 47 GRE (also known as PPTP Pass-through)
For L2TP over IPSEC: 1701 TCP and 500 UDP
For SSTP: 443 TCP

After installation users should be Enable remote access To connect to your VPN server. On a stand-alone server this can be done in Computer Management MMC, in a domain environment this can be done in the user properties of an Active Directory user.

If you do not have a DHCP server in your environment, you must add a static IP address pool. This is often required if you have only one server hosted with your service provider. In the properties of your VPN server, you can click on the IPv4 tab and enable and configure “Static address pool“.

Now you must add an IP address from the same subnet as the set of static addresses to the network interface of your server so that users can access the server.

I hope this helps you to setup a VPN server in a small, lab or hosted server environment. You can find more information about Windows Server in Microsoft Docs.

Tags: direct access, install a VPN server on Windows Server, Microsoft, remote access, Virutal private network, VPN, VPN server, Windows Server, Windows Server 2019, Windows Server 2019 VPN, Windows VPN Last modified: July 7, 2019

About the author / Thomas Maurer

Thomas works as a senior advocate for the cloud at Microsoft. He interacts with the community and customers around the world to share his knowledge and gather feedback to improve the Azure cloud platform. Prior to joining the Azure engineering team, Thomas was a Principal Architect and Microsoft MVP, helping to design, implement, and enhance Microsoft’s cloud technology. If you want to know more about Thomas, check out his blog: and Twitter:

December 21, 2021 β€’ Microsoft Azure

I know many of you want to know more about Azure Arc and how you can take advantage of the Azure Hybrid management and control level and…

Read more β†’

Don’t forget to share this post with friends !

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *



AnyConnect certificate-based authentication. Cisco community πŸ‘¨β€πŸ’» The information in this document is based on the following software and hardware versions: ASA 5510 running software...


AnyConnect: Install a self-signed certificate as a trusted source πŸ‘¨β€πŸ’» kmgmt-2879-cbs-220-config-security-port objective The goal of this article is to walk you through creating and...


ITProPortal . Portal πŸ‘¨β€πŸ’» We live in a dynamic moment in terms of technology. Even criminals are becoming more technically savvy and are using...


Download antivirus for free. Best antivirus protection πŸ‘¨β€πŸ’» Protecting your identity, banking information and privacy Cybercriminals want your credit card details, passwords and other...