I'm trying to prevent people from creating vlans on our switches. The problem is I can restrict them to "switchport access vlan" but if they use a vlan that isn't on the switch it creates it automagically. Short of creating all my vlans and putting the switch in client mode is there another way?

These are 12.2 IOS switches.