For Windows domain computers, you can use machine authentication in conjunction with Machine Access Restriction (MAR) to validate access from corporate laptop, and allow access using DACL and/or dynamic VLAN assignment. These can be done using Cisco ACS or ISE.