@reggie14:
While the OP asked about blocking Windows 10 devices, it appears to either be based on: 1) a mistaken belief that it would help address the threat of WiFi Sense, or 2) general rage against Microsoft and/or Windows 10, resulting in a desire to block such devices out of spite.
I am treating Windows 10 devices just like I treat any unauthorised device that doesn't comply with or breaches our security policy. I don't think that my attitude is any different to Windows 10 as it would be to an unauthorised Wireless Access Point plugged in to the network.
AFAIK, WiFi sense isn't implemented on earlier Windows devices except on Windows phone. If I have a 'mistaken belief' are you saying you know that WiFi sense is implemented on other devices other than Windows 10?
Yes. I'm no longer a fan of Microsoft or any of its products. Perhaps my Windows Mobile experience scarred me for life. I'm not a fan of any technology or company that is privacy invasive, insecure, or just makes my life harder. We have Windows 7 and some Apple devices on our networks. They are not exactly sandboxed or quarantined but they are all actively monitored for suspicious activity. We have no plans to deploy Windows 10 yet and probably won't ever need to. From Windows 2.0 to Windows 7, I have been bitten enough times by Microsoft over the last 28 years to become spiteful.
Now that pfSense 2.2.4 has been released, I can continue purging PSK and rolling out cert logins again.