Event ID: 6276

Network Policy Server quarantined a user.

Network Policy Server quarantined a user.

Contact the Network Policy Server administrator for more information.

    Security ID:            %1
    Account Name:           %2
    Account Domain:         %3
    Fully Qualified Account Name:   %4

Client Machine:
    Security ID:            %5
    Account Name:           %6
    Fully Qualified Account Name:   %7
    OS-Version:         %8
    Called Station Identifier:      %9
    Calling Station Identifier:     %10

    NAS IPv4 Address:       %11
    NAS IPv6 Address:       %12
    NAS Identifier:         %13
    NAS Port-Type:          %14
    NAS Port:           %15

RADIUS Client:
    Client Friendly Name:       %16
    Client IP Address:          %17

Authentication Details:
    Connection Request Policy Name: %18
    Network Policy Name:        %19
    Authentication Provider:        %20
    Authentication Server:      %21
    Authentication Type:        %22
    EAP Type:           %23
    Account Session Identifier:     %24

Quarantine Information:
    Result:             %25
    Extended-Result:            %26
    Session Identifier:         %27
    Help URL:           %28
    System Health Validator Result(s):  %29

Auditing:     Conditional

Enable if auditing of NPS activity is desired.

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Network Policy Server"

LEFT/RIGHT arrow keys for navigation

Back to List