802.1x question, how do you make sure that Windows allows a user to logon only if network security is finished performing the handshake? Don't know if the resources are really accessible "Wait for network" policy works in such a case.