Forticlient 5.4.4.536 Remote Access Issue

I've got an interesting problem where a handful of my Forticlient installs on students machines are allowing kids to add VPN connections. We are using a Fortigate 300D v5.4.5. I'm confused how some kids can add the connection and some kids can't (greyed out). Any ideas on this? I do not want students to add VPN connections.