I gather that Sygate Security Agent can be used to disable the
Wireless in our laptops while they are connected to the LAN. Do you
know how this is configured?

Is done by IP - i.e. you tell it that if it it sees that it has been
given a LAN address it should block all other local addresses (whether
they be VPN, Wireless etc)

Or does it understand Windows interfaces so that it can be configured
specifically to block some types of interface under different
circumstances.

If anyone has an example configuration that they don't mind sharing
(suitably anonymised of course) then that will be great.

Bright