Radius Authentication to Windows 2010 with NPS

[PaulM1114]

Has anyone setup NPS on Windows Server 2010 to service Radius requests from the FortiGate?

Specifically I'm looking for documentation on how to setup the Windows Server side (NPS.)

We use Radius with NPS (using FGT vendor attribute) to not only authenticate the user before Internet access is allowed but also the NPS returns a group in the radius-accept message which the FortiGate matches against.  We set this up all the time for our customers who use NPS on Windows 2008 servers without a problem.  We attempted to use the same Windows 2008 Server NPS documentation to setup NPS on Windows 2010 Server to talk to the FortiGate but with the 2010 server the radius-accept message does not include the group.

Thanks!