Follow the NPS dependencies after an address or name change

Source facts

Microsoft directs administrators to verify that an address change preserves authentication, authorization, and accounting paths. For a multihomed proxy bound to a specific address, the NPS port settings must be updated with the new address. After a name change, remote RADIUS server groups configured with computer names must be updated. When certificate-based authentication is deployed, renaming NPS invalidates its server certificate and requires obtaining a new certificate. The page also calls for checking SQL logging connectivity after an address change. Microsoft Learn.

Applicability

Inventory consumers of the old server name and address before scheduling the change. Distinguish direct-IP device settings from name-based remote-server-group entries. Include accounting and logging dependencies rather than limiting acceptance to a successful sign-in.

DSE recommendation

Prepare a dependency checklist with the old and new endpoint, the owner of each access device or proxy, and the corresponding update step. Preserve current bindings and remote-server-group settings. Ask the logging owner to identify the expected post-change records and a way to detect a silent loss. Coordinate the change window so the related endpoints are not updated independently without a shared plan.

Verification

Trace an authorized test request through each relevant device or proxy after the change. Verify the selected NPS endpoint and the expected accounting or SQL logging result. Check that configuration no longer depends on the retired name or address. Record remaining exceptions and investigate each before closing the migration.

Official references

Microsoft Learn: Verify Configuration After NPS Changes. Source reviewed September 8, 2026.