On the Conditions -> Authentication Methods select "Unencrypted Authentication (PAP/SPAP)" and "Encrypted Authentication (CHAP)" and retest. I have Windows Server 2016 working with Mikrotik Dot1X using RADIUS with PAP and it works well.
Yes I know it's unencrypted but I'm doing MAC Address authentication on an internal network.
Technology Manager - NTT INDYCAR Series
From the Racing Capital of the World
"Any Opinions Expressed Here are strictly mine, and not those of INDYCAR"