Just a heads up, I know nothing about VPNs or what options within Windows need to be set up to use them, so please keep this in mind with regards to advice I post. This is the main reason I didn't originally post in this thread.
I'd be curious if a repair install would fix the issues users with VPNs are experiencing and would try it as it leaves everything in tact and at worst, if it doesn't fix the issue, the only thing lost is about an hour from start to finish. It would take an additional 45 - 60 minutes to run the two dism commands and one sfc command, and then run windows update for the 46 then KB2919355.
EDIT:
I just remembered you mentioned when MS ran /restorehealth it failed with errors...if /restorehealth is run a second time and returns errors, a repair install is the only way to fix this (technically you could spend hours going through the log and the component store to root out the corrupted component store files, however it's quicker and easier to just do a repair install which replaces all system files within the Windows folder.