jbickford

Additionally, whether it is by design or not, it may be because NPS is trying to process BOTH 'Domain Users' and 'Domain Computers'. I was able to duplicate my NPS Policy, creating a seperate policy for 'Domain Users' and 'Domain Machines'. Because they are matched in order, when 'Users' fails, 'Machines' picks up and authenticates! Hope that helps someone! (Sorry for updating an old post - it's google's fault!)