EAP-Response failure on wireless

Question

Using Aruba Clearpass for wireless access. We recently changed the configuration for our clearpass servers and generated new server certificates. After the deployment a small number of clients are unable to join the network. Took captures with Aruba support and found step 12 of the EAP-PEAP process failing, the client is not responding with an EAP-Response/Challenge (EAP-MS-CHAPv2) packet so not responding with a password. We removed the GPO and added the wireless profile manually and the user is prompted for credentials and is able to complete the process and connect to the network. So something is unique on these client machines where group policy is not applying wireless settings correctly. Only we no longer have a test subject to compare good settings to bad. Trying to find what setting might cause the client to not respond to the challenge request.