RADIUS is still the method to connect authentication of networking
devices to your domain. Move to WPA2-enterprise and have users login
with domain creds. They instantly lose connectivity if their credentials
are disabled / locked https://mobdro.bio/...