It would be really nice to have the ability to filter out and block devices that use randomized MAC addresses when connecting to wifi.

The second digit in the first octet is always 2, 6, A or E so a simple wild card filter that could capture this should be all that is required, and the ability to put that in the black list. 

This filtering needs to happen on the wifi MAC filtering level, not on a global level since VM's also end up with randomized MAC.