You cannot intermittently download roaming profiles on a Windows XP-based wireless computer

You are using a Microsoft Windows XP-based wireless computer. The computer uses one of the following authentication methods:

• Extensible Authentication Protocol-Transport Layer Security (EAP-TLS)
• Protected Extensible Authentication Protocol-Transport Layer Security (PEAP-TLS) for 802.1X authentication

Additionally, the user reauthentication option is enabled in the remote access policy.

After you restart the computer, you cannot intermittently download the roaming profiles. However, when you log off and then log on the computer, you can successfully download the roaming profiles.

This problem occurs because EAP-TLS and PEAP-TLS use a client certificate to validate the network connection. The roaming profiles that contain the certificate are stored on a domain controller. When you try to download the roaming profiles after you restart the computer, Windows XP also tries to reauthenticate the user. User reauthentication times out before you can download the roaming profiles.

To work around this issue, use one of the following methods:

• Use computer-only authentication.
• Reduce the size of the roaming profile. Then, you can finish downloading the roaming profiles before user reauthentication times out.