@Tim_G said in Installing VPN access on Windows Server 2016:

I don't remember experiencing or hearing about an MS RRAS server that was compromised or hacked do to the fault of the MS Software directly. It's always been because of dirt poor implementation and security oversights... connecting a Windows server directly to the internet, .....

If you consider exposing the server as a mistake leading to compromise, that's really the point that we were making 🙂