We push out our wifi cert with a configuration profile but it doesn't work if a computer is enrolled before we do the AD bind. I've been working on pre-stage enrollment and this is particularly a problem when doing that. We can remove the profile and re-add it and we are good to go. It would be nice to not have to do that. Any suggestions would be welcome.