How to block unknown devices from connecting to the network?

I want to create a white list of devices that can connect to the network, both wired and wireless.

I was thinking of filtering based on MAC addresses but I now realise that spoofing a MAC address is trivial and so is sniffing out a white listed MAC address.

Is there a way to block unknown devices without harassing the user to verify themselves each and every time they connect to the network?