Check the underlying connection first

Confirm that the device is connected to Wi-Fi or Ethernet at all. Organisation rules apply to managed work equipment; do not bypass a mandatory VPN or its protective functions. If comparison without the VPN is explicitly permitted, use a non-sensitive public website and do not transfer work data outside the required connection.

Record the VPN application's exact message and the time. Expired authentication calls for different action from an unreachable server. Check the system clock and use the application or configuration supplied by your organisation. Unverified profiles found in forums are not an appropriate replacement.

Separate sign-in from access to a service

If the VPN says connected but an internal share remains unavailable, first confirm the address and your permission to use it. A green connection symbol does not establish that every resource is authorised. If several people cannot reach the same service, the service or central VPN infrastructure may be involved.

If a public service fails only while the VPN is active, its operator may restrict some VPN connections. That does not automatically indicate a home-router fault. Do not arbitrarily change servers or security options on managed equipment. Give the responsible support contact the affected service and exact behaviour instead.

Make one controlled comparison

Where allowed, try the same VPN sign-in through another known connection, such as a prepared mobile hotspot. This can indicate whether the original network is involved. A hotspot also changes the provider and route, however, so success does not identify one particular faulty setting.

Avoid a general network reset as the first step. It can remove adapter configuration and require the VPN to be set up again. Save the error, application version and connection type first. Never place passwords, private keys or complete confidential configuration files in a public support message.

After an authorised test, restore the intended working arrangement and check the VPN status again. Stop the investigation when the next step requires administrator access or changes to centrally managed rules.

Sources and further reading