Our NPS Server is not authenticating users from time to time with the message "unable to connect to a domain controller in the domain where the user account is located."
While we do have 3 child domains in our AD Forest, the NPS server is in the only child domain that has accounts currently being used with NPS. Plus, this only happens the first few times you try to connect. If you give it a few minutes after your first attempt, it will successfully authenticate you when you try again. I've run "nltest /dsgetdc:domainname" from the NPS server, and it returns the correct info. DNS appears to be 100% correct too. I can resolve IPs for the domain name. The NPS server is registered with AD too (it exists in the RAS and IAS Servers AD Group).
Why is it only failing on the first few attempts? This is a major issue as we were planning to roll this new AD authenticated wireless network out to a few hundred employees within the next week or two.