I am not clear what you are asking. How do you want to deny the AP? You want to block it from being plugged into your network? Do you want to restrict it from connecting to a controller? If you can give more details of what you are trying to do I can try to assist.
-Eric