WPA2 enterprise setup on Windows with no domain.

Non-domain windows computers will not connect to enterprise WiFi without manual configuration. This has been a pain for years. Apple products all work. Cell phones work. But Windows requires all these clicks.

Click on Wireless Networks
Network and Sharing Center
Manage wireless networks
Add
Manually create a network profile
Network name: xxxx
Security type: WPA2-Enterprise
Next
Change connection settings
Security tab
Settings
Uncheck Validate server
Configure
Uncheck box
OK
OK
Advanced settings
Specify authentication: change to User authentication
OK
OK