Hi mrinfosecurity,
Port security is a good option to prevent the wireless devices from allowing users to connect. If you have Cisco phones connected to the ports it might be difficult because they require 3 MAC addresses if you chain a PC off of the phone. If you have a Cisco WLC it can detect rouge AP's. You can then monitor the rouge access points via solarwinds to alert you when one is detected. Depending on your office space you may see a lot of rouge AP's outside of your office perimeter. As others have mentioned it is a tricky request.