HotSpot Cafe style access for students
We have win2k3 server with ISA doing all our web filtering and PaperCut NG doing all our charging.
All machines are registered on the Domain via AD and GPO controls everything.
Users log on and gpo and logon scrips manage experience based on machine location and type and user type.
What I would like to do is have a way of allowing staff but mainly students to bring in their own laptop, PSP, smartphone, etc and hook on to our network without IT support.
What I want to happen is that they detect our wireless network, or plug directly into a wired port, and from there get auto directed to some web page or similar that authenticates them somehow. Once authenticated they can have access to internet, printers, folder shares, and other domain resources as per their authentication privileges. If they don't authenticate, then we can either block them, or offer them a variety of guest accounts (visiting staff), or give them the choice to pay for our network service via some coupon system.
Is there anyone out there doing this already and could point me in the direction of where I could find software solutions to install on our servers to achieve this.
Apart from Office staff who would have domain joined desktops, eventually I would have no other desktops and the students and staff could choose their own (mac, pc, *nix, whatever) laptop, network capable device and hook on.
I am not worried about software compatibility at this stage, as I know having multiple OSes would mean multiple document platforms (ie MSWord on Mac/PC versus OpenDoc etc) I have a plan for that problem.
So again, are there any off the shelf solutions out there ie Cafe Hotspot style access that is good for a school situation.
PS: we have simple wireless APs, but have good switches with VLAN support etc.