Hello experts,
I’ve set up a RB411AH with an R52H acces point to use in my work network.
The network is 100% microsoft based (active directory & all everything else).
I want to not use WPA2-Personal (with a shared key), it cannot be centrally deployed through group policy. 
I think WPA2-Enterprise is the way to go (this is new to me).
I have on Radius server, but i would enjoy removing it from the network. I also have and manage an certificate authority.
How can i set it all up so that i could deploy the wifi profiles using group policy the ‘right way’ (i suspect it will involve computer certificates)?
Thanks all.