You are also going to need to figure out a way to differentiate between personal device versus University owned device. We can do this several ways...
1. Is there an asset tracking db which has all the corporate owned devices wifi MAC addresses?
2. Are you exploring an MDM vendor like Mobile Iron (you can mark devices as Corporate Owned there).
Here is another option you can do...
Give each department head an account to OnBoard the departments shared devices (laptop carts, iOS, etc). Make only those accounts be able to OnBoard (AD memberOf attribute). This moves the management of these mobile carts off of IT/HelpDesk and onto the departments themselves.
I also recommend looking into our Standalone QuickConnect. You can add a link to the captive portal page that says something like "Students: Tired of having to login? Click here to switch to the SECURE Wifi Network!"