I don't think this can reliably be avoided in an office environment with sensible amount of work.
The only thing I could think of is to use static ARP on every device in the network or using a managed switch with some severy security settings/MAC binding.
In any other situation there will always be some possibility to create problems with duplicate ip addresses.
But having a static-ARP only network would be an admins' nightmare. And if saying "static-ARP only" I DO mean EVERYTHING (routers, workstations, print servers, ...)...