It may be a windows issue but I thought to check here if someone know the answers.
I am succesfully running EAP-TLS with machine certifcate auth from last few months for windows 7 and windows 10. Two of my users reported issue that they cannot connect to it. I can see in the ISE logs that the client is trying to connect. I can see the error like below. (I am checking it from my chrome history)
Failure Reason: 12303 failed to negotiate EAP, because PEAP not allowed in
I even tried with manual SSID with the required parameters but it didnt work as welly.