I'd like to disable the wireless connection on all laptops only when they're connected to our domain (which must be through a wired connection). I've been searching, including an old thread on here, but I want to confirm that the data I found is still up to date. It's basically looking like there's not really a good way to do this, which is shocking to me. The laptops are mixed manufacturers, so I don't want to do this through a third-party driver/utility/etc... Just disabling the Wireless Zero Config service won't work, since they can use said various third-party apps to do it instead. I was looking at the new templates for hardware restrictions, but it looks like that's just going to deal with device installations. I then thought well, let's create a logon (and logoff) script that does it. However, it looks like I can't actually disable devices from the command line without installing additional software.

Is this my only option? Install devcon or similar on each laptop, and then create logon/logoff scripts? It seems shocking to me that that's the only way to handle things, but I have yet to see anything else...

Thank you!