Do you mean someone physically unplugging the AP and plugging in their own device?
It would depend entirely on the switch you are using, but practically I would say no. You might find a way to use only tagged VLANs and black hole the native/default VLAN or not use DHCP as basic deterrents though.
Maybe best to go for physical security like using conduit and mounting height to prevent access?
- Ex community all-star (⌐⊙_⊙)