I want students that have domain user accounts to be able to bring their laptops to school. I have setup a radius IAS and created a self signed cert. I have chosen to allow domain users to have access. Does this mean that the student laptops must be part of the domain? Or am I missing something.
No, the laptops don't have to be part of the domain. The credential will be supplied when they try to access the service (WAP). If you have it tied into LDAP or AD, then they supply their domain credentials, and will be given access to the resource. http://en.wikipedia.org/wiki/RADIUS.