That may be what we need to do because I can't see a way around it.

Did you set the windows supplicant to computer authentication?

Also, I need the seperate rules because we have different users that will need different authorization profiles with different filter-ids sent back to our aruba controller.

I wouldn't pay to much attention to those bottom groups as I haven't even begun to test those yet.  The reason we have so many is because we have about 30 seperate domains with a 1 way trust.  I'm not a windows guy so don't ask me why it is like thi...

Here is the Wireless LAN Controller service:Going back to the previous rules, I have tried setting the machine authentication to deny instead of permit - right now it has an authorization profile called "Machine-Authentication", that basically just ...