How to disable possibility to use mobile hotspots in corporate LAN (windows based)

My users use private phones to access internet and bypass corporate filters. How to block it? They often do it while connected to LAN by cable which make it even more insecure. Is there a way to disable it when in LAN? Of course they may use it while outside.