MAC Address Whitelist Mode
I have three teenagers and I really want to rely on the eero profiles to control their access. The problem is that the default behavior of Windows 10, at least in some versions, is to enable the random hardware addresses feature, which renders profiles useless (I believe other devices do the same, I just know about Windows 10 definitively).
I want to deny devices based on a MAC address whitelist, so the default is to deny. Then, if one of these devices spoofs its MAC address, whether intended by the user or not (the point being that's it's very easy to do), it simply doesn't have access until the problem is fixed.
I know folks love to come in and say that MAC address filtering isn't a valid security measure, but I don't think that applies here. The machine belongs on my network, has the credentials, I just want to rely on its profile membership.