This was a hard one to do research on. We all know about the great capabilities of Active Directory and its ability to be expanded. The problem in researching this one is that Microsoft has many documents advertising what you can do with EAP authentication and active directory, but I had a difficult time finding a definitive yes or no as to where that data is store. Is it in Active Directory or a third party program that integrates with Active Directory? I did find one article that says Active Directory can store Biometric data alongside your other user profile information.
For authentication purposes, a certificate is use when you are using an EAP method, such as smart cards.
Windows 7 has biometric management built in.Reference: http://technet.microsoft.com/en-us/library/dd367857.aspx