we are using 802.1x on our environment, but it works terrible with windows, is any alternative of this, like authentication in order to get IP, with certificates or something ?
You want to look into IPSec. It is an excellent NAP enforcement and provides network level peer authentication and protects communications using the cryptographic security services.