take out his airport card?
or
set him up as a non-admin user and then login to his account and go to network preferences and turn off airport.
show [network port configurations]
uncheck airport.
then click the lock in the bottom hand corner of the network window.
i have not tested this, but he *should* need an admin password to unlock that preference and turn on his airport.