Today I enabled two simple policies on our corporate SSID
Assign group policies by device type
After applying the policy, I noticed iPhones and Androids picked up a custom policy and were blocked from the corporate SSID as expected. However, one of our users Macbook's also picked up the policy, even though when I looked at the device type, it correctly detected OS X. See attached.