[1] n.b. the purpose of that feature is to deauthenticate your own organization's computers if they try to connect to an access point that is not operated by your organization (e.g. if someone accidentally connects to the phishers operating m4riott-c0rp).