You may want to try some type of captive portal solution. You could have people register and then be granted access based on the review of the form.
You may want to set it up where the registration is on a restricted network so if there is a compromise of the captive portal network they do not get onto the "real" wi-fi network. You could then assign the user a certificate or use some other method to grant them access to the "real" network.
This would probably not be a "domain" thing in terms of Windows, but you would have some type of admin interface and workflow.
You may want to research more on Network Admission Control.
If you want to whitelist / blaclist SSIDs, there is group policy for that:
However, if you want people remote to phone home everytime they connect to a random wifi network that may be impractical. You may instead want to consider some type of forced VPN solution back to your network, that way even though they are on the random network they can only connect once they are back on the corporate VPN. You may run into issues with some of these solutions when people are traveling and they can't get onto the wi-fi network unless they clear a captive portal, but you may find a solution that has a sandbox browser that allows captive portal registration before forcing the VPN connection.