In our case I have a Radius Server for Web Authentication.
I have a SSID guest for Web access, of such form that any user of any group can authenticate itself like guest.
In the AD to the guest group I have not associated nothing. The error that gives when connecting a user of grupoX to the SSID guest is ?The user tried to use an authentication method that is not allowed in the director of corresponding remote access?