Disable su for users not in wheel group

You can disable the su option for users not in wheel group.

vim /etc/pam.d/su

#auth           required        pam_wheel.so use_uid

Uncomment this line , Save and exit.  There after the users cannot use su option, will display incorrect password.