Actually I was able to get it worked out. We have three separate vlans on our network, a corporate, a guest, and a student. By enabling SSID isolation on all three I was able to get it to behave...

I'm sorry, but that makes no sense. Are you saying that you should set up two different vlan's on the device? If so, you need to be aware that this access point does not support that.