VPN Establishment Capability for Remote User is Disabled [Fix]
3 min. read
Updated October 31st, 2023
Published January 1st, 2023
Share this article
Improve this guide
Read the affiliate disclosure page to find out how can you help VPNCentral effortlessly and without spending any money. Read more
If you try to create a VPN connection using Cisco VPN, you might get the VPN establishment for a remote desktop is the disabled error message.
Depending on your version of Cisco AnyConnect, you might also get the error that states Cisco Anyconnect VPN establishment capability for a remote user is disabled. A VPN connection will not be established which has the same cause and can be solved by following the same steps.
Browse the web from multiple devices with industry-standard security protocols.
70% of our readers choose ExpressVPN
70% of our readers choose ExpressVPN
Access content across the globe at the highest speed rate.
Connect to thousands of servers for persistent seamless browsing.
Those who use early versions of AnyConnect 4 might not see this error, the issue appears more often for Cisco AnyConnect 3.1 patch and Windows 7 or XP users.
For the latest versions (above 4), Cisco connects and then immediately disconnects, which should be a sign that something’s wrong. Plus, if you have debugging mode activated, you might receive the Profile settings do not allow VPN initiation from a remote desktop message.
That’s why it’s important to update the Cisco AnyConnect Secure Mobility Client to the latest version before proceeding with the following steps.
How to enable VPN establishment capability from a remote desktop?
You must activate AllowRemoteUsers to enable the remote desktop’s VPN establishment. That way, you get access to your system from virtually anywhere.
Here’s how to configure it step-by-step:
Time needed: 5 minutes.
- Connect to the ASDM (Cisco Adaptive Security Device Manager)
- Go to Configuration > Remote Access VPN > Network Client remote Access > AnyConnect Client Profile
- Set a Profile Name and pick a Group Policy to apply it to
- Click OK
- Set Windows Logon Enforcement to SingleLocalLogon
- Set Windows VPN Establishment to AllowRemoteUsers*
- Save the profile as an XML
- Connect to the firewall’s ASDM
- Go to Tools > File Management > File Transfer > Between Local PC and Flash
- Select and upload the XML you previously created
- Once the file is uploaded, click Close
- Go to Configuration > Remote Access VPN > Network (Client) Access > Group Policies
- Select your Group Policy for your AnyConnect clients
- Head over to Edit > Advanced > SSL VPN Client
- Find the Client Profile to Download section and uncheck the Inherit button
- Click New > Browser Flash and locate the XML file
- Save all settings and try to reconnect using AnyConnect Mobility Client
Note that Cisco disables remote access to lock out intruders. By enabling it, you create room for potential attacks. Therefore, remember to deactivate it whenever it’s not in use.
Does VPN work with remote desktop?
Yes. If you configure your remote desktop via a VPN server, you should be able to use it with no problems. In case your Cisco Anyconnect VPN is not working, try repairing your installation files or fixing your registry.
With a VPN you can easily access files on Windows 10 with ease and increased security. The VPN network encrypts your data, so the risk of leaking or losing private information is very low.
The configuration is simple. You just have to use the same VPN IP address on your remote desktop network to access it using a dedicated or native app.
Check our overview for the best alternatives to Cisco VPN for better performance and improved privacy.
In conclusion, if you receive the VPN establishment capability for a remote desktop is disabled error message when trying to remotely connect to your office using Cisco VPN in RDP mode, just follow the steps above.
You can also read our in-depth article on how to correctly install Cisco VPN on your Windows 11 PC. It will help you avoid any errors along the way and maybe even save a little bit of time.
