Block adding domain from the catalyst 4500 switch

[johnisccp]

Is there a way for me to block people from creating a workgroup domain from the switch? I only want one domain on my network. I do not want other people to connect to the switch and create a little workgroup.

[gpulos]

short of blocking the TCP/UDP ports required for Windows browsing, there is no way to have cisco devices keep a user from connecting a PC to your network and configuring a new workgroup/domain. and this wont even stop them from doing it, this would just stop it from advertising and communicating with other workgroups/domains.

you could use 802.1x for authentication to connect a PC to a LAN switch port. this way only authenticated systems could connect to the network.