Using the documentation for deploying the user tunnel profile via SCCM, the package is deployed and the user gets the VPN profile as expected.
What if the user deletes the profile? How can you have it redeploy or rerun?
If the SCCM package wont redeploy after the user deletes the profile then they will never get the profile again and you are forced to manually fix them with powershell by making them a local admin of their computer and installing with the powershell script.
Is there a better way?