As part of our continued commitment to security, reliability, and performance, Layer 2 Tunneling Protocol (L2TP) and Point-to-Point Tunneling Protocol (PPTP) were deprecated in 2024. They will be removed from future Windows Server releases following Windows Server 2025. After many years that these protocols have supported VPN connectivity, organizations should transition to modern alternatives such as Internet Key Exchange version 2 (IKEv2) and Secure Socket Tunneling Protocol (SSTP).
This change reflects the broader shift toward VPN technologies that better meet current security and connectivity requirements. In this article, learn what removal means, why this change is happening, and what organizations should do next to prepare for a smooth transition.
What does removal mean for L2TP and PPTP?
Windows Server 2025 is the final Long-Term Servicing Channel release to include and support L2TP and PPTP for VPN connectivity in Routing and Remote Access Service (RRAS). L2TP and PPTP will not be available in future Windows Server releases following Windows Server 2025.
Timeline
October 8, 2024: Deprecation announcement
October 30, 2026: Removal announcement
(TBD): Removal from the next major release of Windows Server
Important
L2TP and PPTP remain available and supported in Windows Server 2025 through its lifecycle, which ends in October 2035. Their removal from future releases does not change support for Windows Server 2025._
Why move away from L2TP and PPTP
With the increasing sophistication of cyber threats, these protocols have become less effective in providing the robust security necessary to protect our data. Their vulnerabilities have been well-documented, and they are no longer sufficient to meet the current security standards.
Modern protocols, such as IKEv2 and SSTP, provide stronger security and are better suited for current VPN scenarios. These protocols offer enhanced security features, faster connection speeds, and improved reliability.
Benefits of SSTP
Strong encryption: SSTP uses SSL/TLS encryption, providing a secure communication channel.
Firewall traversal: SSTP can easily pass through most firewalls and proxy servers, ensuring seamless connectivity.
Ease of use: With native support in Windows, SSTP is simple to configure and deploy.
Benefits of IKEv2
High security: IKEv2 supports strong encryption algorithms and robust authentication methods.
Mobility and multihoming: IKEv2 is particularly effective for mobile users, maintaining VPN connections during network changes.
Improved performance: With faster establishment of tunnels and lower latency, IKEv2 offers superior performance compared to legacy protocols.
Steps to transition to IKEv2 or SSTP
Note that PPTP and L2TP will not remain available in future Windows Servers after Windows Server 2025 to make outgoing VPN connections based on these protocols. Please refer to the step-by-step instructions on transitioning to SSTP/IKEv2: How to install and configure Remote Access (RAS) as a VPN server.
Note
Begin migration planning now, so that future Windows Server deployments do not depend on these protocols.
Summary
Removing L2TP and PPTP from future Windows Server releases is an important step toward stronger and more modern VPN connectivity. By evaluating dependencies and transitioning to IKEv2 or SSTP, organizations can prepare for future Windows Server releases while using supported L2TP and PPTP deployments on Windows Server 2025 during its lifecycle. If you need help planning the transition, contact Microsoft Support or your Microsoft representative.