I have been witnessing a very strange issue sporadically for a few months now. We have a standard WPA2-Enterprise PEAP profile in our environment. The authenication mode is set to 'User or computer' authentication. Every once in a while we will have users who cannot connect because their authentication mode have been changed to "Computer authentication" only. We know the users are not making this change and there are no Group policies in play for this kind of setting. Anyone have any suggestions on how this can change by itself or how we can prevent this annoyance? Thanks in advance.

for what it's worth, I've seen this as well. I'm going to be using a GPO to lock it down, but it would be nice to know a few things: 1. What is the default mode for all new profiles and can it be changed. 2. Why is it changing as you've pointed out.