Either wifi locked to mac addresses meaning only authorised devices on company network (previous company) or (as current company) have a wifi network completely separate from corp LAN. You want LAN access over wifi in the building (from your work laptop) you have to VPN in.
Sure you could still get a BYOD device physically plugged in unless you do complete mac address level access, as they had at an investment bank I worked at. But either of the above stops most tablets and phones connecting to the corp network.
Biting the hand that feeds IT
