You could enable MAC Authentication on Guest Wireless. Then devices connecting with try and MAC-Auth first, and then perform Captive Portal.
If you are using ClearPass, you can create a new service to process MAC Authentications coming from the same SSID, and you can either use a static host list, or use the Guest Device Repository to provision the devices.