Setting up always-on VPN connection with Group Policy doesn’t have to be insanely difficult. With PolicyPak VPN Manager, just take your EAP profile and you've got all you need. Connections can be always on (forced) or not. More details in this video.

Learn more about how Netwrix PolicyPak simplifies Group Policy management https://www.netwrix.com/endpoint_management_software.html