Guest VLAN for staff

Hey,

As the whole BYOD seems to be growing do you guys give your staff any access?

I have three wireless VLAN's, one for the Netbooks that uses certs, one for Staff laptops with proxy internet and network access and a guest one which just gives filtered internet access.

I've started to have staff come to me asking for their device to be connected to the internet.

I'm starting to think about letting them use the guest account and maybe the kids on a friday during their golden time (with some sort of AUP)...i dunno, maybe im being naive.

What do you guys do?

Staff get put in with the Sixth Form here, they even sign the same form as the Sixth Form do bar not having to have a member of the Sixth Form team co-sign it.

Seems to work well bar lack of coverage as we don't have full coverage yet due to building works still on-going till end of summer, but staff just connect in, and logon to the Ruckus and then Smoothie with the usual AD Credentials and job done and its all logged.

We have a separate staff VLAN. It's firewalled from the internal and student wireless networks.
We only allow access to the proxy and to external imaps servers.
The theory was to stop any malicious software on the student network from affecting staff devices, and vice versa.

See that's the bit that worries me, that we only have Policy Central on our machines (bleugh!) so i wont be able to log devices activites such as tablets etc...