I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.
2016 and later
Network Policy Server discarded the accounting request for a user.
Contact the Network Policy Server administrator for more information.
User:
Security ID: %1
Account Name: %2
Account Domain: %3
Fully Qualified Account Name: %4
Client Machine:
Security ID: %5
Account Name: %6
Fully Qualified Account Name: %7
Called Station Identifier: %8
Calling Station Identifier: %9
NAS:
NAS IPv4 Address: %10
NAS IPv6 Address: %11
NAS Identifier: %12
NAS Port-Type: %13
NAS Port: %14
RADIUS Client:
Client Friendly Name: %15
Client IP Address: %16
Authentication Details:
Connection Request Policy Name: %17
Network Policy Name: %18
Authentication Provider: %19
Authentication Server: %20
Authentication Type: %21
EAP Type: %22
Account Session Identifier: %23
Logging Results: %26
Reason Code: %24
Reason: %25
2012r2
Network Policy Server discarded the accounting request for a user.
Contact the Network Policy Server administrator for more information.
User:
Security ID: %1
Account Name: %2
Account Domain: %3
Fully Qualified Account Name: %4
Client Machine:
Security ID: %5
Account Name: %6
Fully Qualified Account Name: %7
OS-Version: %8
Called Station Identifier: %9
Calling Station Identifier: %10
NAS:
NAS IPv4 Address: %11
NAS IPv6 Address: %12
NAS Identifier: %13
NAS Port-Type: %14
NAS Port: %15
RADIUS Client:
Client Friendly Name: %16
Client IP Address: %17
Authentication Details:
Connection Request Policy Name: %18
Network Policy Name: %19
Authentication Provider: %20
Authentication Server: %21
Authentication Type: %22
EAP Type: %23
Account Session Identifier: %24
Logging Results: %27
Reason Code: %25
Keep me up-to-date on the Windows Security Log.
Email*:
*We will NOT share this
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection