To deploy an 802.1X-authenticated wired network using Windows Server 2008 and Windows Vista, perform the following tasks:
Configure Active Directory for accounts and groups.
Configure NPS servers.
Configure 802.1X-capable switches.
Configure wired clients.
You must deploy certificates if you are doing the following:
Computer-level authentication with EAP-TLS and computer certificates. Each wired client computer needs a computer certificate.
User-level authentication with EAP-TLS and either smart cards or registry-based user certificates. Either each wired user needs a smart card, or each wired client computer needs a user certificate.
User or computer-level authentication ...