Cisco Wireless :: 5508 EAP-TLS With Wireless Before Windows Log On

Ill start with a list of equipment;
 
5508 WLC
3502i AP's
Cisco ACS 5.3
Windows 7 clients
 
WLAN is configure with WPA2/AES with 802.1x for key management.Client is configure with WPA2/AES, auth method is Microsoft: Smart Card or other certificate on computer. Auth mode is User or Computer authentication.  The client is configured to use a certificate on the computer.  "It only works if user or computer auth is seected."  If i use Computer Authenticate option......its says it cant find a certificate to use for EAP.ACS is configured to only allow for protocol EAP-TLS.We have created a standalone CA server and have distributed the CA root and client authentication certificates to all test systems.
 
This whole process with EAP-TLS works great if you are already logged in to the machine, with cache credentials.  Once I log off the Windows 7 client, I lose connection to the WLAN.  We would like to stay logged on to the WLAN.  PEAP w/ MSCHAPV2 works great with staying connected to the WLAN but we want to use EAP-TLS.