I would apply a group policy to the VLAN interface of the MX with all the settings you want for students.  note you will only be able to have one schedule.   Then create another group policy for staff which bypasses this and apply it directly to their devices.    https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying_Group_Policies        ... View more