Share via

Network Policy Server denied access to a user

Mong Leon 0 Reputation points
2024-03-20T07:52:17.6133333+00:00

i used to ask my WIFI user connect via RADIUS authority from Microsoft NPS server, but i got the error event below.

while i checked the certificate of PEAP types on NPS i find the error below while i click edit "Microsoft: Protected EAP (PEAP)", is it because the certificate is not correct? how to fix the issue?

User's image

Network Policy Server denied access to a user.

Contact the Network Policy Server administrator for more information.

User:

Security ID:			CEMEGROUP\l.mong

Account Name:			l.mong

Account Domain:			CEMEGROUP

Fully Qualified Account Name:	CEMEGROUP\l.mong

Client Machine:

Security ID:			NULL SID

Account Name:			-

Fully Qualified Account Name:	-

Called Station Identifier:		60-b9-c0-f1-01-00:CLIENT-CORP-WIFI

Calling Station Identifier:		3a-5b-f5-6f-7d-13

NAS:

NAS IPv4 Address:		172.25.23.201

NAS IPv6 Address:		-

NAS Identifier:			WLC_01

NAS Port-Type:			Wireless - IEEE 802.11

NAS Port:			1218

RADIUS Client:

Client Friendly Name:		DEMO

Client IP Address:			172.25.23.201

Authentication Details:

Connection Request Policy Name:	Secure Wireless Connections DEMO

Network Policy Name:		Secure Wireless Connections - USERS DEMO

Authentication Provider:		Windows

Authentication Server:		CHIZSSRV010.cemegroup.local

Authentication Type:		EAP

EAP Type:			-

Account Session Identifier:		-

Logging Results:			Accounting information was written to the local log file.

Reason Code:			22

Reason:				The client could not be authenticated  because the Extensible Authentication Protocol (EAP) Type cannot be processed by the server.
Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,614 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,638 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jing Zhou 5,210 Reputation points Microsoft Vendor
    2024-03-21T02:27:03.6066667+00:00

    Hello,

     

    Thank you for posting in Q&A forum.

    To move forward, we will need some basic information for further check, please kindly help collect it:

    1.What’s your OS version of the client/server?

    2.Are you using user account or computer account to do the authentication?

    1. Are you using windows built supplicant to connect to wireless or third party?

    4.Run below command:

    Netsh wlan show profile <profile name>

    Netsh wlan export profile folder=c:\temp

    Netsh lan show profile <profile name>

    Netsh lan export profile folder=c:\temp

    netsh wlan show wlanreport

    gpresult /h c:\temp\gp.html

    1. Provide following log which you can find in event viewer:

    Microsoft-Windows-WLAN-AutoConfig/Operational

    Hope this answer can help you well.

     

    Best regards，

    Jill Zhou

  2. Mong Leon 0 Reputation points
    2024-03-25T02:42:33.05+00:00

    can you see my comments?