[x38iq84n]

Yes, it's very common to only allow corporate laptops provisioned with a standard image, certificates etc. If you need to remote in then you must have a corporate laptop.

From a security standpoint it is risky and amateurish to allow VPN from an unknown device under someone else's management.

[xcq1]

They weren't entirely unmanaged devices as they had to fulfill additional criteria.