And we come back here.
So over the weekend I do my best thinking.
Creating a GPO will work perfectly for domain joined computers. However, we don't join our student computers to the domain. Any pointers on getting their computers setup for 802.1x? I figure worst case we can drop instructions on our FAQ site, but if we can figure a way to do it behind the scenes that'd be even better.
I'm sure OnBoarding is an option, but so far we had not planned on going the OnBoarding route for Student Computers.