NPS allowing windows 11 devices to authenticate but not windows 10 devices

Question

i am having a bit of a challenge allowing windows 10 devices to authenticate on nps over an 802.1x ssid . while testing with windows 11 device i noticed that they connect as expected to the ssid when using the domain machines parameter, but for windows 10 devices either it can't connect or it requests you put domain credentials.

did i miss configure , or maybe there is a setting thats affecting or blocking windows 10 machines on nps.

Answer 1

It sounds like you're encountering an issue where Windows 11 devices are able to authenticate on your network via NPS (Network Policy Server) over an 802.1X SSID, but Windows 10 devices are either unable to connect or are prompting for domain credentials. This discrepancy between Windows 10 and Windows 11 devices could be due to several factors. Here are some steps and considerations to troubleshoot and resolve this issue:

Check NPS Policies:

• Review the Network Policies in NPS to ensure they are not specifically tailored or restricted to only Windows 11 devices. Sometimes, conditions or constraints in these policies can inadvertently affect different OS versions differently.

Update Windows 10 Devices:

• Ensure that all Windows 10 devices are updated to the latest version. There might be compatibility issues with older versions of Windows 10 that are resolved in the updates.

Certificate Issues:

• If you are using certificates for authentication, check the certificate settings. Ensure that the Windows 10 devices have the correct certificates installed and that they are not expired.
• Also, verify the certificate authority (CA) is trusted by the Windows 10 devices.

Compatibility Settings:

• Check if there are any compatibility settings within NPS that might be more suited for newer OS versions like Windows 11. Ensure that the authentication methods selected are compatible with Windows 10.

Client Configuration:

• On the Windows 10 devices, check the network configuration. Ensure they are set up correctly to connect to the 802.1X SSID. This includes checking the wireless profile settings, EAP type, and any other relevant settings.

Driver Updates:

• Update network drivers on the Windows 10 devices. Outdated or incompatible drivers can cause issues with network authentication.

Logs and Event Viewer:

• Check the Event Viewer on the NPS server for any relevant logs that might indicate why the authentication is failing for Windows 10 devices.
• Also, check the logs on the Windows 10 devices for any errors or warnings related to network authentication.

Test with a New Network Policy:

• As a diagnostic step, try creating a new network policy in NPS specifically for Windows 10 devices with basic settings and see if they can connect. This can help identify if the issue is with the policy settings.

Group Policy Objects (GPO):

• If you're using GPOs to manage network settings, ensure that there are no policies that might be affecting the Windows 10 devices differently than Windows 11 devices.

If after these checks the issue still persists, it might be beneficial to consult with a network specialist or reach out to Microsoft support for more in-depth troubleshooting.