Built-in mechanism to determine that a host belongs to a domain I trust?

I’ve seen similar questions on this, but not to the degree of specificity I’m hoping for, so… here goes.