Disabling Wireless Autoconnect in XP SP2

Having the ability to automatically connect to wireless networks seems like a
nice convenience; however, in our Corporate environment, it is undesirable.
Specifically, we don't want people inadvertently connecting to wireless
networks while they are connected to our wired network. Since XP enables
automatic connection by default upon creation of a preferred network profile,
this is a problem for us.

Does anyone know of a way to make the default not to automatically connect
when a new profile is created (the equivalent of unchecking the checkbox on
the connection tab of a preferred network profile)? Also, is there a way to
programmatically setup SSID's to use WPA2/AES without automatic connection?
I've looked at WPS and it doesn't support WPA2. Also, I've looked at group
policy, but it also doesn't support WPA2.

Thanks for any help you can provide.

--
Neal