As others suggested, domain account and lock it down. If there is NO WAY you can do that, I'd setup a script for said local user via task manager that disables the NIC on login. But then again, he could just turn it on, unlesss it is a limited local account? But really GPO and locking down is the way to go.
↧