Preventing more than one network interface

Is there a way to prevent a computer from enabling a wireless network
interface, or dial-up modem connection when connected to an ethernet LAN and
vice versa?
My organization has a written policy for users to not have their wireless
NIC, or their dial-up modem active when they are connected to the LAN via
ethernet cable. This has been identified as a potential backdoor to the
wired LAN. However, we have found that users have not been following this
written policy for a number of reason. Is there a way to do this globally,
without overburdening the users?