Today I enabled two simple policies on our corporate SSID
Assign group policies by device type
After applying the policy, I noticed iPhones and Androids picked up a custom policy and were blocked from the corporate SSID as expected. However, one of our users Macbook's also picked up the policy, even though when I looked at the device type, it correctly detected OS X. See attached.
This morning, I had an issue with two MacOS devices, both have been on our Corp wireless for several months. Today, they received the message "this network's administrator has prevented you from using the network".
Both devices had been assigned a custom policy blocking access to the corp Wifi.
I assume it's possible, though unusual that the device has specified a different User-Agent string from all previous authentication requests, or could this be something else? and is there somewhere I can identify the cause. The event log's for the affected device are limited.