I have set up authentication using PEAP on my windows server 2008r2 network. Wireless and vpn clients (all Vista or win7) authenticate properly. Wired clients on LAN do not. Wired policy has been configured by Dot3svc does not show on services list on any of the domain controllers or the clients.
Hyphen is used as a replacement for the dot character in the domain name, so allowing this in the xxx.onmicrosoft.com domain name might result in some discrepancies.