Forum Discussion

paullannes's avatar
paullannes
Copper Contributor
Aug 02, 2023

Windows Server 2022 NPS Extension MFA Error

Hello everyone, i have a Windows Server 2022 running as VPN and another Windows Server 2022 acting as RADIUS. All domain joined, NPS is joined in domain, the Azure AD and local AD are synced, enabled ntlmv2 support for ms-chapv2 and the radius authentication is successful, but after installing the NPS extension MFA, configured and checked up with the troubleshooting powershell script and all certificates are fine, passed all checks, but when i try to connect i receive a message "could not verify server identity".

 

Looking at the logs, the connection was dropped by a third-party .dll, the user-sign is enabled in the azure app.

security
Windows Server

1 Reply

Sort By
  • Nick_Doud's avatar
    Nick_Doud
    Copper Contributor
    Oct 03, 2023
    The "third party .dll" is the MFA plugin "NpsExtnForAzureMfaInstaller.exe" your logs can be found:
    Event Viewer (local)\Applications and Services Logs\Microsoft\AzureMfa\AuthZ\AuthZOptCh

    Suppose to send prompt to AzureAd for MFA.

Resources