I got involved in a complicated issue with a Cisco ISE implementation, and to understand what the endpoint (windows) was doing had to debug the 802.1x on the ccommand line.
Look to all interfaces in the current OS stack and providers
netsh trace show interfacesnetsh trace show providers
netsh lan set tracing mode=[yes|no|persistent]
Capture all info to the tracefile trace.etl, make sure you have the right providers
netsh trace start capture=yes tracefile=C:\trace.etl provider=[microsoft-windows-wired-autoconfig|microsoft-windows-wlan-autoconfig|microsoft-windows-onex]
Time to stop the capture and and find the root cause :)
netsh trace stop