Deauthenticate User Blocked in Radius Server

Hi,

I have users authenticating in my wireless network using Radius over NPS (Windows 2008 Server).

Even when I block an user, if it is already authenticated, it is not disconnected from the wireless network.

However, in a Windows system, if it manually disconnects and try to connect again, the access is denied. But, in a Android system if I disable the device’s WiFi and enabled it again, it connects normally. If I manually “forgot” the network on the device and try connect again, then the access is denied.

So, is there a way to force the disconnection of the user after a blocking in the Radius server?

I got this excluding the registry in the ARP table, but I would want a better method.

Thanks in advance.