How about controlling the DNS for corporation.com? Any company with a reasonably competent IT staff should be able to flatly deny a request for a subdomain. "You want to setup myblinkenlightsbox.corporation.com? Has that machine been hardened to corporate standards? Request denied."