>Or if you really want their email you could setup an excap.   I looked at doing that with my first customer that asked, then found SplashAccess could provide the service for less than I could get it built. ... View more

I disabled my local status pages.  Because auditors. ... View more

I have the same situation (although on a much smaller geographical scale).   40 separate buildings with people sometimes traversing between them.  One organization, 40 'networks' beneath them, an SSID configured identically between all 40 buildings to allow those folks to roam. ... View more

@SLR If you are connecting with WPA-PSK this does not apply.  This is only relevant if you want to add your phone/handheld devices to the corporate wifi that uses Radius with domain authentication.  Hope this helps. ... View more

Using a certificate from a trusted PKI is almost pointless.  A certificate verifies that the DNS name you are accessing actually belongs to the server you end up talking to.   With PEAP (eap EAP-TTLS) the WiFi client does not know the DNS name of the RADIUS server it will be talking to.   The most you could do is to create a group policy to pre-mark it as a trusted certified.     It is often easiest to deploy a Microsoft CA server on one of your existing servers, so it is AD integrated, and then let the NPS servers request the certified.  Having the CA server part of AD makes all the AD joined computers trusted it automatically.     For customers that don't have Microsoft CA deployed these days I frequently generate special self signed certificates using openssl, and then just create a group policy to tell all AD members to trust the certificate.  But the process is quite complicated to explain.  Using the Microsoft CA is much easier if you have not done it before. ... View more