Configuring a Wi-Fi policy
In an enterprise/office setup, you want a secure wireless network that the users both should not and cannot connect to themselves, whether this is using a certificate-based connection or just a secure code that is not shared with staff.
To do this, we need to deploy a Wi-Fi policy to our mobile devices. Remember, however, that unless you are using a zero-touch enrollment such as Samsung Knox, the devices will not pick up this new policy until after enrollment. Therefore, you will need an initial internet connection to enroll and set up new devices. This could be a 4G/5G connection, a guest network, or a basic enrollment network with strict security policies applied.
This example will cover a more simple WPA2 network configuration as an Enterprise configuration will require certificate deployments. If this is more appropriate for your environment, you can follow the guide here: https://learn.microsoft.com/en-us/mem/intune/configuration/wi-fi-settings...
