M
Maha Abuelsaud
Hi,
I have an issue in configuring Radius server in windows server 2016 , I also can't determine where the problem is
event log is as below but I have some comments on it
Network Policy Server denied access to a user.
Contact the Network Policy Server administrator for more information.
User:
Security ID: GLOBAL\Computer_name$
Account Name: host/Computer_name.domain.com
Account Domain: GLOBAL
Fully Qualified Account Name: domain.com/Office/EG/Workstations/Computer_name
Client Machine:
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name: -
Called Station Identifier: a0-ec-f9-54-9f-00:
Calling Station Identifier: 00-e1-8c-99-41-2a
NAS:
NAS IPv4 Address: 192.168.10.10
NAS IPv6 Address: -
NAS Identifier: Cisco_e0:b4:64
NAS Port-Type: Wireless - IEEE 802.11
NAS Port: 1
RADIUS Client:
Client Friendly Name: CiscoWLC
Client IP Address: 192.168.10.10
Authentication Details:
Connection Request Policy Name: Wireless
Network Policy Name: Connections to other access servers
Authentication Provider: Windows
Authentication Server: NPS_Server.domain.com
Authentication Type: EAP
EAP Type: -
Account Session Identifier: 35633465616365372F30303A65313A38633A39393A34313A32612F3433333038
Logging Results: Accounting information was written to the local log file.
Reason Code: 65
Reason: The Network Access Permission setting in the dial-in properties of the user account in Active Directory is set to Deny access to the user. To change the Network Access Permission setting to either Allow access or Control access through NPS Network Policy, obtain the properties of the user account in Active Directory Users and Computers, click the Dial-in tab, and change Network Access Permission.
why is the computer name is placed in the field of user name
the error code says that setting in the dial-in properties of the user account in Active Directory is set to Deny access to the user. although in the network policy ignore user dail-in is checked
Continue reading...
I have an issue in configuring Radius server in windows server 2016 , I also can't determine where the problem is
event log is as below but I have some comments on it
Network Policy Server denied access to a user.
Contact the Network Policy Server administrator for more information.
User:
Security ID: GLOBAL\Computer_name$
Account Name: host/Computer_name.domain.com
Account Domain: GLOBAL
Fully Qualified Account Name: domain.com/Office/EG/Workstations/Computer_name
Client Machine:
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name: -
Called Station Identifier: a0-ec-f9-54-9f-00:
Calling Station Identifier: 00-e1-8c-99-41-2a
NAS:
NAS IPv4 Address: 192.168.10.10
NAS IPv6 Address: -
NAS Identifier: Cisco_e0:b4:64
NAS Port-Type: Wireless - IEEE 802.11
NAS Port: 1
RADIUS Client:
Client Friendly Name: CiscoWLC
Client IP Address: 192.168.10.10
Authentication Details:
Connection Request Policy Name: Wireless
Network Policy Name: Connections to other access servers
Authentication Provider: Windows
Authentication Server: NPS_Server.domain.com
Authentication Type: EAP
EAP Type: -
Account Session Identifier: 35633465616365372F30303A65313A38633A39393A34313A32612F3433333038
Logging Results: Accounting information was written to the local log file.
Reason Code: 65
Reason: The Network Access Permission setting in the dial-in properties of the user account in Active Directory is set to Deny access to the user. To change the Network Access Permission setting to either Allow access or Control access through NPS Network Policy, obtain the properties of the user account in Active Directory Users and Computers, click the Dial-in tab, and change Network Access Permission.
why is the computer name is placed in the field of user name
the error code says that setting in the dial-in properties of the user account in Active Directory is set to Deny access to the user. although in the network policy ignore user dail-in is checked
Continue reading...