Can I use wireless 802.1x authentication on windows for client machines that are not in the domain? actually, on windows 7 it's a bit more complex: in advanced settings, choose 'user authentication'. Click on 'Settings' for PEAP, click on 'configure' for EAP-MSCHAPv2 and uncheck 'automatically use my windows logon name and password (and domain if any)'. But still, this was the right approach, so thanks!