Simple security

I have friend that want some light security on the small network they have (15-25 PCs). What is the best way to secure his network so that someone can't just plug in his laptop and be on the network? He would prefer to make this seamless to his users. Thanks