Windows won't take static routes from DHCP VPN

Hello,

​

We use the Windows VPN with RRAS from Windows, it works great (been doing it for 2 decades). We've been pushing static routes through DHCP (option 121, and is very common). This has worked flawlessly - until today. We have a few machines at a specific customer that VPN in just fine, but not a single static route comes from DHCP. Performing a route print confirms this on a working and non-working machine. This works fine on Vista+ so it isn't a OS version difference.

​

I've tried netsh int ip reset but that didn't effect anything. I've also checked all of the network settings and they all seem clean and normal, no manual metrics or other oddities. The machines are remote, so I'd like to avoid the "nuke it from orbit route". (see what I did there?)

​

Turning off split tunneling does make things work, but that is expected. Naturally, we want spit tunneling on.

​

Clearly something on the client side on a few machines is messed up, but I can't find where it is or even what it is.

​

Any ideas?