Forum Discussion
Windows 11 clients cannot authenticate to NPS server using computer authentication
- Had this with 802.1x and AlwaysOn VPN. Maybe it's the same for your Wifi profile,. The reason is documented here https://directaccess.richardhicks.com/2021/09/23/always-on-vpn-error-853-on-windows-11/
We had this issue starting yesterday. CA issued cert expired and needed to be renewed. After renewal some but not all clients re-connected. Turns out only Windows 10 clients could, Windows 11 would not. After going down many, many rabbit holes in the last 6-8 hours it turns out that despite the Group Policy settings listing the CA in Trusted Rooy Cert Authorities under Network Authentication Methods (1) below. When we eventually drilled down into the actual settings the required root CA was actually unticked. A simple re-tick and Windows 11 PCs started authenticating. I have no idea why or how Windows 10 machines were able to connect. It's 11am and I need a drink.
Darren, your hard work on this case just saved me a lot of time and effort solving this problem here at my office. I hope you enjoyed that drink, because you earned it!!