Multiple IAS Wireless Policies

[Tim Guy]

I am using IAS to authenticate two or more SSID Wireless networks with PEAP

SSID Wireless network A has a rule of "If member of windows group A" then
allow connection.

But with two or more SSID Wireless networks, for example SSD Wireless
network B, if I have a rule of "if member of windows group B" although this
will work, group A's authentication will also work so each group can jump
between Wireless networks.

Can IAS do with. How can I distinguish the users/groups and networks and
stop one rule working for the other network?

The reason I say this is because it has been proved to me. A user on network
A uses Windows Wireless zero administration to connect to their own network
and then browses to the second network, gets asked for their
username/password twice and it logs them in.

Tim