MAC Auth first, then User?

We are experiencing an issue where certain policies need to push down to laptops before the user enters their credentials to authenticate to the wireless network. We only have Radius/802.1x enabled on the wireless right now. Is it possible to authenticate the device based on MAC address so the initial connection is there (so the laptop is "online") and then have the user authenticate via the Novell Client (with 802.1x) to login to the desktop?