Unfortunately we are stuck at what looks like the very last leg of our journey. Our clients hit the NPS server but always kick back an error "Explicit Eap failure received" we are exclusively win10
It looks like the client is connecting via EAP. I can't seem to find anywhere in the controller to force it to PEAP. Playing with the NPS server I was able to add "Microsoft: Smart Card or other certificate" as an authentication option which now allows the clients to connect, but somehow I feel that's not the proper setup.