Yeah in my home I go the next level MAC Address verification on who can be on the net
 

Unfortunately @ work I am the Systems Manager of Chain of Hospitals Radiology Departments not the Network Manager and to boot this group is Radioloy, not IT.

Even if they were willing to not route IPS that we have not "accounted" for It would be too cubersome. It is difficult enough to get connections Punched and trouble shoot net problems that arrise in our extensive sites.

It is tempting though:)