We have a Windows based site running Windows Server 2012. We have ZyXEL NWA1123-AC access points that up until now we've allowed people to use on laptops, mobile phones etc. We have been using a password but had been giving out as needed.
We want to change our policy to only allowing company issued laptops to connect to our wireless network (even company issued mobiles will no longer be included).
The issue with changing the password and re-connecting the laptops is that anyone can go in and view the password (a 2 second search: https://www.google.co.uk/search?q=how+to+view+wifi+password&oq=how+to+view+wifi+password&aqs=chrome..69i57.2655j0j1&sourceid=chrome&ie=UTF-8).
What is the best method to secure a Wireless Access Point (without passwords I assume), so that we can restrict it to company issued laptops?