Currently we have a limbo VLAN that we set all of our unused switchports to (with accompanying ACL) that way if one of our employees plugs into our network they can't access anything but we're able to find the device on the network and grant it acces...