Intel has fantastic admin utilities for their WLAN cards. Be carefull if you are buying them for HP's, as they require custom F/W so you can't buy any old card and throw it in. It is this way for broadcom cards and HP's, but not sure about Intel cards. Broadcom does not offer a decent admin utility.
2 other options.
1. Go with radius authentication: their username and password allows them access to a rotating key, no static key required (need good ap's that support radius auth, a radius server, and something for usernames/passwords, such as LDAP, Active Directory, or a static list on the radius server)
2. WZC can be controlled/configured via GPO's. Don't ask me which ones/where, cause I'm a #1 guy (and also a pre #1...we have almost all Intel based WLAN cards)