APM domain joined pre validation

Hello All, I am sure this question was asked before I did search and did not find any reference, here goes... I use APM to provide network access, As per audit team I do a AV check on all the remote machines. The new requirement now is to let only domain joined computers to be able to access resources? How can I do this check on the client side before prompting them to authenticate? Thank you.