Wireless GPO stops applying Windows 10 Clients

Question

Hello!
We have had random issues with clients not connecting to our internal Wireless. When we investigate, we find that the device is no longer getting the GPO that pushes are policy out.
If we do a RSOP it shows that the policy should be applied. However, the client no longer as the correct settings. netsh wlan show profile, shows the profile is missing and wasn't applied. If we plug the device in, restart, or run gpupdate. The policy applies and reconnects.

Clients Windows 10
Domain 2019
Wireless -
WPA2-Enterprise
TKIP
Eap-PEAP
Secured Password (EAP-MSCHAP V2
Computer Authentication

This happens to random clients. Laptops Are often off the network for a few days, but connect from home via always on VPN.

Event viewe Errors
Log Name: Microsoft-Windows-WLAN-AutoConfig/Operational
Source: Microsoft-Windows-WLGPA
Date: 1/11/2022 3:05:12 PM
Event ID: 14003
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: (xxxxxxxxxx-Device name)
Description:
A previously existing Wireless Group Policy couldn't be applied to your computer.

Wireless Group Policy Name: -
Reason Code: 2147943606
Event Xml:
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-WLGPA' Guid='{46098845-8a94-442d-9095-366a6bcfefa9}'/><EventID>14003</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2022-01-11T20:05:12.4496389Z'/><EventRecordID>3379</EventRecordID><Correlation/><Execution ProcessID='3196' ThreadID='3220'/><Channel>Microsoft-Windows-WLAN-AutoConfig/Operational</Channel><Computer>device name-sd.com</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PolicyType'>0</Data><Data Name='PolicyName'>-</Data><Data Name='PolicyNamePlaceholder'> </Data><Data Name='ReasonCode'>2147943606</Data></EventData></Event>

Answer 1

I would probably do new GPO with wireless settings, maybe double check that you have correct settings and they are up-to-date. Then test it with test machine by filtering out current wifi gpo so they will not overlap.