Putting this here in case someone has this issue but user specific.   I was having a similar issue with Radius authentication. What I did to resolve this was narrow it down to a select group of users. Opened their AD accounts server side. On the dial-in tab, Changed the radial button under Network Access Permission to "Control access through NPS Network Policy". Applied and worked like a charm.  ... View more