How to use the Access-Control-Allow-Origin header

When I try to use any other value other than the wildcard "*" it fails pre-flight.
How to set the value for our internal domain when the origin can be different desktops?
I tried this "http://\*domain.net" or "http://\*.domain.net" but without success.