Configure NPS to check certificate purposes before granting network authorization

Hello,

I want my NPS Radius server (on Windows Server 2008R2) to check if particulars OID are present on the clients' certificate before allowing them access to my wifi network.

I cannot find out this specific option.

I can ask it to enable an EAP-TLS authorisation policy and check client's certificate, but i also want that My radius server checks some OID's présence in the the client's certificate.

Can you help me please ?

Thanks :-)

Best regards

fred