Hi,
2 issues 1) is there a listing somewhere of all OIDs and what they all mean to windows (XP) ?
I've heard theres some wierd tool called Google or such....i dont know.. some basic search found eg http://support.microsoft.com/kb/287547
2) Issuing client certs isn't that difficult.� with windows vista/7, installing a cert is a simple double-click operation, so if they have a usb flash, you can use linux to zip a copy of their private key and a .doc with instructions (including screenies!) on configuring their OS in a matter of seconds, all they have to do is stop by IT to request a key once, and it's good for as long as you honour it.
if dealing with client keys - most of the times its just PEAP with user/pass and its the CA thats an issue. even then there are ways of doing this quite easily... eg https://su1x.sf.net alan