Wireless Client Disconnect - Unspecified

[Ryan10]

Hi,

Our users have been randomly disconnecting from WIFI. We already made an adjustment like Turn-off Client Balancing, Adjusting the TX Power, Disabling Band Steering.

The user is stationed at his desk and he gets disconnected frequently.

When we see the event log for the user it shows client disassociation --> Unspecified reason.

Wireless adapter is up to date.

Any expertise suggestions would be highly appreciated.

[CMR]

What AP model(s) is the user connecting to and what firmware are they running?

How many other clients are connected to the AP(s) the user is connecting to?

If you look at the RF Spectrum report for the AP(s) what do you see, here you can see the AP on channel 11 only has significant interference on channel 1, so is performing well:

[Alex1231]

I'm having a similar issue. It's been very frustrating.

In the WLAN report it says that the connection has been disconnected by the user - however this is definitely not the case. How does your WLAN report look like?

4042	2024-09-26T08:09:48	[‒]Capability change on {7cdbde04-e5b8-48d8-b4bc-e54ba44699e1} (0x47008000000000 Family: V4 Capability: None ChangeReason: CapabilityReset)
11004	2024-09-26T08:09:48	[‒]Wireless security stopped. Network Adapter: Intel(R) Wi-Fi 6E AX211 160MHz Interface GUID: {7cdbde04-e5b8-48d8-b4bc-e54ba44699e1} Local MAC Address: 28:C5:D2:4B:D8:31 Network SSID: [redacted] BSS Type: Infrastructure Security Hint: The operation was successful.
8003	2024-09-26T08:09:48	[‒]WLAN AutoConfig service has successfully disconnected from a wireless network. Network Adapter: Intel(R) Wi-Fi 6E AX211 160MHz Interface GUID: {7cdbde04-e5b8-48d8-b4bc-e54ba44699e1} Connection Mode: Automatic connection with a profile Profile Name: [redacted] SSID: [redacted] BSS Type: Infrastructure Reason: The network is disconnected by the user.

[Investigator1]

Did you find the cause of your issue?

We are experiencing the same behaviour within our environment, we see clients frequently disconnect with unspecified reason even with stationary endpoints, they reconnect within 3 seconds.

We use Cisco Catalyst 9164 with the latest firmware 30.7.

It's always accompanied by this event in the WLAN report.

4042	2024-11-11T10:00:15	[‒]Capability change on {2c1eb6ff-fb65-46c1-b413-4b6558e4d222} (0x47008000000000 Family: V4 Capability: None ChangeReason: CapabilityReset)
11004	2024-11-11T10:00:16	[+]Wireless security stopped. Network Adapter: Intel(R) Wi-Fi 6 AX201 160MHz Interface GUID: {2c1eb6ff-fb65-46c1-b413-4b6558e4d222} Local MAC Address: 10:3D:1C:87:12:F7 Network [redacted] BSS Type: Infrastructure Security Hint: The operation was successful.
8003	2024-11-11T10:00:16	[‒]WLAN AutoConfig service has successfully disconnected from a wireless network. Network Adapter: Intel(R) Wi-Fi 6 AX201 160MHz Interface GUID: {2c1eb6ff-fb65-46c1-b413-4b6558e4d222} Connection Mode: Manual connection with a profile Profile Name: [redacted] SSID: [redacted] BSS Type: Infrastructure Reason: The network is disconnected by the user.

[Alex1231]

Yeah, our issue was that we were using intune to push out a custom xml policy for wpa3 sae psk. Intune was randomly checking in and reupdating the configuration. The adapter/windows must have thought the user was updating the configuration and dropped/reconnected

[Investigator1]

I was able to trace our issue to a very similar root cause, every time the device syncs with Intune it disconnects from the network for a second. This was incredibly helpful, thanks a lot.

[scorpio20]

Could someone please provide a more detailed explanation? We have a single large branch in Canada and we're experiencing the same issue where Intune-managed devices (using a client certificate CA on the SSID) are randomly disconnecting. In most cases, they reconnect within a few seconds. What configurations or changes are needed to resolve this?

[Alex1231]

How in intune are you pushing out your wifi policy? via custom xml? or an actual wifi policy?

Are you getting the same error/reason as above in the wlan report?

[scorpio20]

This is what I see in the WLAN report "Reason: The network is disconnected by the driver".

[Alex1231]

Seems like different symptoms to above. Tried updating your WiFI drivers and AP firmware?

[scorpio20]

That has been done already, users experiencing this only on Intune machines and this SSID (certificate authentication). It happens randomly and reconnects in few seconds.

[Investigator1]

For us the issue was that the intune wifi policy was configured to use WPA2 security, while Meraki was configured to use WPA3. You can try to replicate the issue by forcing an intune sync from the device, then watch the wifi to see if there are any disconnections. The way we resolved this was by creating a new custom XML wifi policy to use WPA3, first assign to some test devices before deploying company wide.