2012 ... You are aware which year we are heaving now? 😉
Back to topic, Have you done a capture of your RADIUS-communication to see if there is any hint? At lest you will see if the NPS sends back an answer like an Access-Reject. And you see if you are matching on any attributes that are not in the request.