WPA / User certificates on XP

[Guern]

Hi,

I'm trying to configure user WPA authentication. So far
I've got a certificate for the machine so it
authenticates (via IAS) before login, then a user
certificate for authentication after login. The problem
is that the user certificate is stored in application
data which is redirected and stored on the server (domain
policy). Therefore, it seems that the access is fine up
until the user tries to authenticate. After that I'm
guessing the user certificate cannot be found before the
network connection is established. Catch 22.

How can I opt for user certificates to be stored
elsewhere on the users PC, or is there another way around
this problem?

Many thanks.
.