My fellow network colleague has added some great insight. All your issues would be resolved with "perfect" change control.Good Luck with whatever you come up with.
Depending on the model of switch you are using (I am assuming 6500 series) you can set port security.set port security enabthe default is for 1 mac address and it will auto learn the first mac, all others will shut the port down.