I have several ACS 4.0 servers which are authenticating wireless users with PEAP and machine accounts. Everything works fine except that about once every few weeks we have to restart the remote agent on the domain controllers - not at the same time....