I suspect a firmware upgrade probably fixes that behaviour. If you want to accept both computer credentials and user credentials you'll need to name both "Domain Comptuers" and "Domain Users" in your policy.By default, XP will re-authenticate with the user credential after the user logs-on (there is no way to do computer-only with XP, I believe).I configured the IAS policy to grant access to Domain Computers, Authentication is set to PEAP and uses a private cert issued by our CA, the other profile settings are all default.
Membership in Domain Admins , or equivalent, is the minimum required to complete this procedure.
When I try to connect using the windows zero configuration utility it gets stuck validating identity.
It says something about windows not finding a certificate.
Please refer to the documentation of your vendor's card in order to turn it off as this may interfere with the procedure here documented.
 = If the eduroam network does not show up, click on Refresh network list.
I moved the selection tab to WPA2 only and keep the rest the same and no luck.