Commonwealth University respects your choice to use a personal Virtual Private Network (VPN) on your own devices. However, most university services, including Microsoft Outlook, D2L Brightspace, and other Microsoft 365 applications, do not require a VPN. In some cases, using a commercial VPN can cause sign-in or account access issues.
Why Personal VPNs Can Cause Problems
Commercial VPN services route your internet traffic through servers that may be located in different states or countries. As a result, your sign-in activity can appear to originate from an anonymous, unexpected, or high-risk location.
To protect university accounts and data, Microsoft's security systems monitor sign-in activity for indicators of potential account compromise. In some cases, VPN usage may trigger these protections, causing your account to be flagged as risky, or requiring additional verification before access is granted, or outright blocked.
If sign-in activity appears suspicious enough to indicate a possible compromise, Commonwealth University may require a password reset as a precautionary security measure. In some cases, Microsoft 365 may identify your account as a risky user, which can result in additional verification requirements or temporary limitations on access until the activity can be reviewed.
How to Avoid Access Issues
Recommended
Disconnect from your personal VPN before signing in to university services such as:
- Microsoft M365 (Outlook, One Drive, Sharepoint)
- D2L Brightspace
- Other Commonwealth University online services (Banner, Apporto)
If You Prefer to Keep Your VPN Enabled
Some VPN providers offer a feature called split tunneling, which allows specific applications or websites to bypass the VPN connection while everything else continues to use it.
You may be able to configure split tunneling to exclude applications such as Outlook or your web browser when accessing university resources. Refer to your VPN provider's documentation for instructions, as configuration steps vary by provider.
Support Limitations
Commonwealth University IT does not provide support for personal or commercial VPN services.
If you experience access issues while using a VPN:
- Disable the VPN and try again.
- Contact the Helpdesk if you continue to have difficulty accessing university resources.
- Password resets and account access issues are generally handled during normal business hours.
- Support may be limited during evenings, weekends, and university holidays.
What Happens If My Account Is Flagged as Risky?
If Microsoft's security systems detect activity that suggests your account may have been compromised:
- Your account may be identified as a risky user within Microsoft 365.
- Additional authentication or verification may be required before access is restored.
- Certain services may be temporarily unavailable until the activity can be reviewed.
- Commonwealth University may require a password reset before normal access is restored.
If action is required, you will be provided with instructions for securing your account and restoring access.
Additional Recommendation
For most Commonwealth University services, a direct internet connection provides the most reliable access experience. If you use a personal VPN for privacy, travel, or public Wi-Fi protection, consider temporarily disabling it when accessing university resources to reduce the likelihood of authentication and access issues.