On our wireless network, we use 802.1x, IAS, Group Policy, and Active Directory security groups to manage VLAN access. I'd think the same thing could be done with wired ports. Domain computer accounts would get internal VLANs and guests would need to set up 802.1x and authenticate as the guest account to be on the guest network. There might be a way to set a default for switches so that non-authenticated devices are on the guest VLAN. I don't know about that.
I can't post URLs here yet. Do a Google search for, 802.1x procurve, and check out those results. HP has a document on doing this and there is one from Avaya that looked good.
