Event ID - 6274

Event Id6274
SourceMicrosoft-Windows-Security-Auditing
DescriptionNetwork Policy Server discarded the request for a user.
User:
%tSecurity ID:%t%t%t%1
%tAccount Name:%t%t%t%2
%tAccount Domain:%t%t%t%3
%tFully Qualified Account Name:%t%4
Event InformationAccording to Microsoft:

Cause :

This event is logged when the Network Policy Server discard the request for a user,a client machine,NAS and Radius client.

Resolution :

Reconfigure, upgrade, or replace the RADIUS client

This condition occurs when NPS discards accounting requests because the structure of the accounting request message that was sent by a RADIUS client does not comply with the RADIUS protocol.

To reconfigure, upgrade, or replace the RADIUS client:
  1. Contact your RADIUS client vendor for configuration assistance or firmware updates. Many RADIUS client vendors provide updated firmware that allows the RADIUS client to send Accounting-Request messages that comply with the RADIUS protocol.
  2. If your RADIUS client vendor cannot provide reconfiguration instructions or firmware that allows the RADIUS client to send RADIUS protocol-compliant messages, you must obtain and install a RADIUS protocol-compliant RADIUS client for use with NPS.
Verify:

To verify that accounting request messages are being processed by NPS:
  1. On the server running NPS, use a network traffic diagnostic application to capture UDP network traffic.
  2. Attempt to connect to the network through the RADIUS client with an access client.
  3. Examine the capture to verify that NPS received and processed an accounting request message from the network access server.
Reference LinksEvent ID 6274 from Source Microsoft-Windows-Security-Auditing

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh