If you are on MacOS 26.0+ and attempting to install a config, but you get the error "Profile installation failed: the 'VPN Service' payload could not be installed. The VPN service could not be created," here is how to proceed.
This error will be triggered if you are on MacOS 26.0+ and have selected the option `Enforce DNS Settings` in the config editor. Apple now enforces that DNS settings are applied to the entire device, not just the signed in user.
To resolve this, you'll need to upgrade to a device-level profile that applies the restrictions to the entire Mac computer. See this help doc for instructions: