# Windows VPN modes

Source: https://onexray.com/docs/advanced/windows/
Description: Compare Windows EXE/ZIP native TUN and Microsoft Store MSIX system VPN, including UAC, interfaces, startup, and quitting.


OneXray's Windows edition is selected by the installation package, not a setting inside the app.

| Behavior | EXE / ZIP | Microsoft Store / MSIX |
| --- | --- | --- |
| Tunnel | Xray native TUN with Wintun | Windows VPN provider through VCore |
| Core permission | UAC when required for Core operations | Normal user integrity; no Core UAC |
| System VPN settings page | Not shown | Automatic connection and bypass settings |
| Data | User application-support location | Package-specific location |
| Launch at login | User Startup Folder shortcut | Package StartupTask |
| Quit | Stop VPN, then exit | Exit app, keep VPN |
| Quit and Stop VPN | Not a separate action | Stop VPN, then exit |

Closing the main window only hides it in either mode. If a required stop fails, the app stays open.

## VPN status and system menus

EXE/ZIP receives Core process-exit events. MSIX reads the Windows system VPN status periodically, including when the window is hidden. Status is not determined by whether the traffic counters respond. Startup and Core failures include the available underlying cause.

The expanded [tray menu](https://onexray.com/docs/shortcuts/) provides server/configuration selection and subscription/geodata updates without navigating every page.

## Xray interface

Both modes require you to choose the outbound network interface under VPN Tunnel. OneXray saves the name and checks that it still exists before starting. It binds Xray, not VCore, to that adapter.

## MSIX system VPN

The Windows system VPN page includes automatic connection, local-network bypass, and excluded network ranges. These are Windows tunnel policies, not Custom Routing rule conditions.

The provider/session host owns the VPN independently of the foreground window. Normal Quit can therefore leave it running. Stop from OneXray, Windows VPN controls, or Quit and Stop VPN.

## Standalone packages

Install EXE with winget, or fully extract ZIP. ZIP does not automatically register links or create shortcuts and does not mean that user data is stored inside the extracted folder. OneXray bundles the required Microsoft Visual C++ runtime for the package architecture in EXE, ZIP, and MSIX; a separate runtime installation is not required for the app.

Changing between EXE/ZIP and MSIX does not migrate data. [Install packages](https://onexray.com/docs/install/). Wintun source and distribution-license references are on the [credits page](https://onexray.com/docs/credits/).