Intune Always on VPN - licensing

Hello,

I am currently working on ensuring that our device and user tunnels are deployed via Intune. They were previously deployed via SCCM.

Both tunnels connect automatically on Windows Enterprise devices, whether it’s Windows 10 or 11, and everything seems operational except for one device that I tested on Windows 10 Business, which does not connect automatically. On this device by default the pro version was installed, but the business is activated with an E3 license

Is Windows Business equivalent to Enterprise with AOVPN? If not, do you have any solutions or ideas to work around this issue?

Thanks

I don’t believe Windows Business supports the Always On VPN Device Tunnel. You must be running Enterprise Edition or Education.

Windows business is just “Windows pro, but connected to Entra ID.”

Windows Entrerprise is necessary as /u/richardmhicks said.

Can you clarify what type of E3 license you’re referring to? O365-E3 or M365-E3? M365-E3 should have Windows 10/11 Enterprise licensing included, but it might not be assigned correctly or your test user is not assigned to the device or has maxxed out its eligible devices during testing.