We have a ZD3000 w/ R600s and R700 APs. Lately, with all the issues presented from Win 10, we've been struggling to keep a handle on our BYOD. One thing I changed that helped a lot with the Win 10 devices was setting our NPS to identify with its machine Cert over our corporate wildcard cert. I'm finding, now, that some of the Apple devices (iPhone 6, 7 MacBook Pro) do not like this at all and fail to receive an address from DHCP. -Others do not. I can't seem to find a rhyme or reason as to inconsistency of this problem. I'm considering purchasing a stand alone certificate for the radius/nps box, but thought I would seek some advice before trying that. Any suggestions would be greatly appreciated.