Situation: The client is running NPS on a Windows 2008 R2. They configured Cisco AP use WAP Enterprise. One of laptop can't access the wireless and the NPS has this event.

Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 12/11/2011 9:30:35 AM
Event ID: 6273
Task Category: Network Policy Server
Level: Information
Keywords: Audit Failure
Description:
Network Policy Server denied access to a user.

Contact the Network Policy Server administrator for more information.

User:
Security ID: NULL SID
Account Name: host/Hyper-V-LT
Account Domain: DOMAIN
Fully Qualified Account Name: DOMAIN\host/Hyper-V-LT

Client Machine:
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name: -
OS-Version: -
Called Station Identifier: 001e.4a26.ddf0
Calling Station Identifier: 001c.bf9a.8774

NAS:
NAS IPv4 Address: 10.0.30.66
NAS IPv6 Address: -
NAS Identifier: Admin-IP66
NAS Port-Type: Wireless - IEEE 802.11
NAS Port: 27007

RADIUS Client:
Client Friendly Name: Admin-Base-IP66
Client IP Address: 10.0.30.66

Authentication Details:
Connection Request Policy Name: Secure Wireless Connections
Network Policy Name: -
Authentication Provider: Windows
Authentication Server: server.chicagotech.net
Authentication Type: EAP
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 8
Reason: The specified user account does not exist

Troubleshooting: In most cases, reason code 8 is user or computer account issue. In this case, we found the laptop hasn't join the domain. There are two resolutions for this issue. One, join the laptop to the domain. The second, disable the validate certificate. To do that, open the properties of the wireless. uncheck the Validate server certificate.

Contact a consultant

Related Topics