How to disable getting IP addresses?

Question

DHCP

Hello.
Such a question is how to prohibit the DHCP server from issuing addresses if the PC does not belong to the domain - "OFFICE" or the workgroup - "OFFICE".
And then my colleague got into the habit of bringing his laptop to work and connecting it via cable, tk. guest WIFI does not suit him.
ps do not offer PC filtering by MAC, the company has more than 100 PCs + a bunch of guests every day
Thank you all for your help

Answer 1

Configure the MAC port binding on the switch. If something with a different MAC address is plugged into this port, the port will not rise.
If people are so advanced that they are able to change the MAC - then only 802.1x, no options.

Answer 2

Disable a port on a switch

Answer 3

There is a problem here, if the laptop is your own, then what will prevent the employee from registering a static ip on his computer and continuing to use the network? Something tells me that dhcp-snooping, option 82, arp and ip protect are not configured on your switches, and the gateway does not check with the dhcp lease table. Therefore, as above, disable the port