Windows 7 needs a specific update to support SHA256, although a machine that has been kept up to date should have it.
https://technet.microsoft.com/en-us/library/security/3033929
Do these machines have "Secure Boot" set in the BIOS?
Tim Roberts, Driver MVP Providenza & Boekelheide, Inc.