topic Hi Sachin, in Network Security

How to enable Cisco Anyconnect VPN through Remote Desktop

sachin.m033 — Tue, 12 Mar 2019 07:51:21 GMT

Hi,

When users are trying to get connected to VPN from Remote machines. They are getting below Err. Some one could help me in fixing this issue by command line.

"VPN Establishment capability from a Remote Desktop is disabled. A VPN Connection will not be established"

Thanks

Sachin M

Hi Sachin,

jagraaga — Tue, 07 Jun 2016 12:14:58 GMT

Hi Sachin,

By default, only local users may connect via any connect client. You would need to edit the anyconnect client profile. Please change the WindowsVPNEstablishment parameter to "AllowRemoteUsers" instead of "LocalUsersOnly.

Please refer the below document for more information.

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect30/administration/guide/anyconnectadmin30/ac13vpnxmlref.html#wp1070852

Regards,

Jagrati

Re: Hi Sachin,

likithpallela — Thu, 28 Feb 2019 07:19:15 GMT

Hi Jagraaga,

By default, only local users may connect via any connect client. You would need to edit the anyconnect client profile. Please change the WindowsVPNEstablishment parameter to "AllowRemoteUsers" instead of "LocalUsersOnly.

After Changed to "AllowRemoteUsers" what I have to do? Please assist me as soon as possible.

Thanks & Regards,

Likith Pallela

Re: Hi Sachin,

buffkata — Fri, 13 Nov 2020 16:08:25 GMT

Any documents that detailed this for FTD/FMC ? I am not sure if this is even allowed on the FTD ?This is the case with the Firepower as well. Is there a similar workaround for the FTD/FMC ?

Re: Hi Sachin,

buffkata — Fri, 13 Nov 2020 16:07:36 GMT

Re: Hi Sachin,

Marvin Rhoads — Wed, 10 Mar 2021 12:17:53 GMT

It's an AnyConnect VPN profile issue. Those are used on both ASA and FTD devices. The only difference is there is not a profile editor built into FMC (or FDM) and you have to edit them using the standalone profile editor and then upload to FMC (or FDM).

Re: Hi Sachin,

buffkata — Wed, 10 Mar 2021 15:25:10 GMT

Interesting...Marvin can I make a specific profile for some users to permit this > but still keep the more restrictive profile in the FTD ?

Re: How to enable Cisco Anyconnect VPN through Remote Desktop

Irakli G. — Wed, 26 Jul 2023 10:18:52 GMT

Hello I have same issue. How can I make it possible to allow remote users if I dont use Client Profiles? Can I enable it globaly for all Group Policies?

Re: How to enable Cisco Anyconnect VPN through Remote Desktop

Jack G — Tue, 09 Sep 2025 13:57:20 GMT

To allow a user in an RDP session to establish a VPN sessions , I actually had to upload the secure client profile to the firewall's VPN profile/group policy. "AllowRemoteUsers" doesn't appear to work when the profile is on the machine C:\ProgramData\Cisco\Cisco Secure Client\VPN\Profile....