If you encounter Event ID 6273, "Network policy server denied access to a user," in the Event Viewer, follow the solutions ...
I have a Watchguard + NPS (Radius) solution running for authenticating VPN users. Users can log in with their AD user + password but not with their domain prefix in front. - domain/user + password.