What about those systems from like cisco which make sure the computer (in this case laptop) has filly updated antivirus and updates installed before allowing access to the restricted network (eg: would touch home network connection) i haven't seen/read much these but would it be worth-wile if you could get the funding for it?
Allowed, but they don't use it out of fear. Packetfence has turned 9/10 sixth form laptops to goo for various reasons.
We use a seperate VLAN for student laptops, iphones etc. All students are welcome to bring their devices in, although parents are aware of the insurance implications - damage, theft etc.We use one of the ports on our smoothwall box for filtering and DHCP.
We have printed laminate business cards with a map of the school on one side with the various WAP's identified and the wireless security key on the other, that we distribute to students on request.
(This said we are very behind on our PAT because nothing is done about our lack of time/staffing, sigh).
As a rule we don't let personal devices on, I don't know what may happen in the future - it's outwith my control - I think I heard some mumbling about letting 6th formers on the wireless in their common room, but that's another (case of) tins of worms...