Network Access resource is not assigned - "IP Cleanup: Failed to read assigned na"

When attempting to connect, a Windows Edge client (APM v11.5.3) successfully logs in (proven by MsgBoxes and session variable dumps right before the Allow exit) but the client then gets the following message:

 

"You do not have access to the Network Access Connection. Please contact your system administrator", followed by a disconnect.

 

The APM log contains the message "IP Cleanup: Failed to read assigned na" immediately after the session logout request.

 

Some things have changed in the access policy, but nothing specifically with Network Variable assignment or the actual NA resource assigned. The policy has a result of "Full", and all of the values I can think of to check are still good (Leasepool name, RD, etc.)

 

Any suggestions on what to check?

 

Thanks,

 

Stan