Under Network Policies what conditions do you have?
On our corp wireless policy we have defined a Windows Groups condition for our Wireless Computers group (Security Group with specific computer accounts in, e.g. shared laptops) and we have another policy that defines a Windows Group for Wireless users (Security
group with specific user accounts in). The later allows any user in the group to connect any device - that is heavily restricted.
This way any authorised domain joined computer that is part of the group just works.