Forum Discussion
Solved
Windows 11 clients cannot authenticate to NPS server using computer authentication
We have a Windows server 2019 datacenter server running NPS. Our WiFi Office clients authenticate to this server for access to the corporate WiFi network. We use computer authentication, so members o...
- Had this with 802.1x and AlwaysOn VPN. Maybe it's the same for your Wifi profile,. The reason is documented here https://directaccess.richardhicks.com/2021/09/23/always-on-vpn-error-853-on-windows-11/
We had this issue starting yesterday. CA issued cert expired and needed to be renewed. After renewal some but not all clients re-connected. Turns out only Windows 10 clients could, Windows 11 would not. After going down many, many rabbit holes in the last 6-8 hours it turns out that despite the Group Policy settings listing the CA in Trusted Rooy Cert Authorities under Network Authentication Methods (1) below. When we eventually drilled down into the actual settings the required root CA was actually unticked. A simple re-tick and Windows 11 PCs started authenticating. I have no idea why or how Windows 10 machines were able to connect. It's 11am and I need a drink.
