question

NurHossain-3648 avatar image
0 Votes"
NurHossain-3648 asked saldana-msft edited

The user or computer account that is specified in the RADIUS Access-Request message is disabled

Need help for following issue

From Event Logs we are getting following error

========================================================================
Network Policy Server denied access to a user.

Contact the Network Policy Server administrator for more information.

User:
Security ID: Domain\00809fb0b9c6
Account Name: 00809fb0b9c6
Account Domain: Domain.NET
Fully Qualified Account Name: Domain.NET\00809fb0b9c6

Client Machine:
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name: -
OS-Version: -
Called Station Identifier: 1C-E6-C7-3C-12-07
Calling Station Identifier: 00-80-9F-B0-B9-C6

NAS:
NAS IPv4 Address: 10.10.59.13
NAS IPv6 Address: -
NAS Identifier: -
NAS Port-Type: Ethernet
NAS Port: 50007

RADIUS Client:
Client Friendly Name: switch.Domain.net
Client IP Address: 10.10.59.13

Authentication Details:
Connection Request Policy Name: Windows-Authentifizierung für alle Benutzer verwenden
Network Policy Name: -
Authentication Provider: Windows
Authentication Server: NPS2012.Domain.net
Authentication Type: EAP
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 34
Reason: The user or computer account that is specified in the RADIUS Access-Request message is disabled.

==========================================
From Network Analyzer , we found following error

===========================================================

22474-2020-09-03-16-08-58.jpg
"



Is there any idea ?

Thank You
Nur

windows-serverwindows-10-networkwindows-server-infrastructurewindows-platform-network
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CandyLuo-MSFT avatar image
0 Votes"
CandyLuo-MSFT answered

Hi ,

Please first check this user account. Make sure in account properties, Dial-In pane, Network Access Permissions is set to Control access through NPS Network Policy.

22652-image.png

Make sure this user account is not disabled in ADUC.

Best Regard,

Candy

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.





image.png (27.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

NurHossain-3648 avatar image
0 Votes"
NurHossain-3648 answered CandyLuo-MSFT commented

no issue found from user settings, but still same issue facing

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Did other accounts have such problem? Please change to another user account and check the results.

0 Votes 0 ·

Just want to confirm the current situations.

Please feel free to let us know if you need further assistance.

0 Votes 0 ·
NurHossain-3648 avatar image
0 Votes"
NurHossain-3648 answered CandyLuo-MSFT commented

Yes, we tried with different account but same issue

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for your updating.

I am sorry that this issue still hasn't been resolved. It is difficult for us to find the cause with general error message. For such case, we need to analyze network traffic to find the cause. However, analysis of network traffic is beyond Q&A support level.

If this issue is urgent, I would also suggest you contact Microsoft Customer Support and Services where more in-depth investigation can be done so that you would get a more satisfying explanation and solution to this issue.
You may find phone number for your region accordingly from the link below: 
Global Customer Service phone numbers 

In this way , they can have a clear picture about your issue and your environment by phone communication and live share session.

0 Votes 0 ·