Windows Security Log Event ID 6275
6275: Network Policy Server discarded the accounting request for a user
On this page
I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.
Server 2016 and later has the following modifications to the event fields:
Free Security Log Resources by Randy
User:
- Security ID
- Account Name
- Account Domain
- Fully Qualified Account Name
Client Machine:
- Security ID
- Account Name
- Fully Qualified Account Name
- OS-Version (Removed in 2016)
- Called Station Identifier
- Calling Station Identifier
NAS:
- NAS IPv4 Address
- NAS IPv6 Address
- NAS Identifier
- NAS Port-Type
- NAS Port
RADIUS Client:
- Client Friendly Name
- Client IP Address
Authentication Details:
- Connection Request Policy Name
- Network Policy Name
- Authentication Provider
- Authentication Server
- Authentication Type
- EAP Type
- Account Session Identifier
- Logging Results
- Reason Code
- Reason
Supercharger Free Edition
Your entire Windows Event Collection environment on a single pane of glass.
Free.
2016 and later
Network Policy Server discarded the accounting request for a user.
Contact the Network Policy Server administrator for more information.
User:
Security ID: %1
Account Name: %2
Account Domain: %3
Fully Qualified Account Name: %4
Client Machine:
Security ID: %5
Account Name: %6
Fully Qualified Account Name: %7
Called Station Identifier: %8
Calling Station Identifier: %9
NAS:
NAS IPv4 Address: %10
NAS IPv6 Address: %11
NAS Identifier: %12
NAS Port-Type: %13
NAS Port: %14
RADIUS Client:
Client Friendly Name: %15
Client IP Address: %16
Authentication Details:
Connection Request Policy Name: %17
Network Policy Name: %18
Authentication Provider: %19
Authentication Server: %20
Authentication Type: %21
EAP Type: %22
Account Session Identifier: %23
Logging Results: %26
Reason Code: %24
Reason: %25
2012r2
Network Policy Server discarded the accounting request for a user.
Contact the Network Policy Server administrator for more information.
User:
Security ID: %1
Account Name: %2
Account Domain: %3
Fully Qualified Account Name: %4
Client Machine:
Security ID: %5
Account Name: %6
Fully Qualified Account Name: %7
OS-Version: %8
Called Station Identifier: %9
Calling Station Identifier: %10
NAS:
NAS IPv4 Address: %11
NAS IPv6 Address: %12
NAS Identifier: %13
NAS Port-Type: %14
NAS Port: %15
RADIUS Client:
Client Friendly Name: %16
Client IP Address: %17
Authentication Details:
Connection Request Policy Name: %18
Network Policy Name: %19
Authentication Provider: %20
Authentication Server: %21
Authentication Type: %22
EAP Type: %23
Account Session Identifier: %24
Logging Results: %27
Reason Code: %25
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection