There is no way to disable prov.exe, prov.dpk etc and use only manual connection method with dpsk? Registering devices with the device itself generates so many empty MAC addresses, that I have disabled the Onboarding portal but I would also like to disable prov.exe. Then I could tell users to open browser, go to controlleraddress.domain.com/activate, log in with AD credentials, copy the network key and use it to join their phones and tablets to our guest network. No certificate errors, no hassle, just plain and simple WPA2 key.