We currently have an enterprise-wide wireless infrastructure that spans over multiple sites in our health system, with one SSID that allows access to our network. We are looking to provide a public access SSID to every site, however we have a concern that the domain computers would connect to the SSID. Is there a way to block domain computers from accessing a certain SSID, without using MAC filtering, possibly through Windows 2003 domain group policy?