How to 100% disable Internet access?

Question

Computer networks

Hello. The task is as follows: there is a device on the windows platform (laptop, PC, etc., it doesn’t matter). You need to make sure that there is 100% no Internet. I did the following:
1. Disconnected the Wi-Fi network
2. Disconnected from the physical network cable
3. Disconnected the lan adapter in the BIOS.
This should be enough, but, you see, if another person sits down at the device, he will be able to find and turn back all the settings and the Internet will appear. Can somehow block the connection to the Internet additionally? With programs or settings?

Answer 1

Unsolder the connector and the Wi-Fi adapter. Although in this case, the one who sits down at the device can solder them back.

Answer 2

Fill the network connector and usb ports with hot melt, the device is in a faraday cage so that no radio signal penetrates.

Answer 3

Mnda. Known to troll you here.
In the BIOS of the motherboard, it is often possible to disable the Wi-Fi module, LAN, USB ports. If your motherboard supports these features, then disable the above modules and set a password to enter the BIOS. Of the pluses - they definitely won’t be able to connect, since the integrated modules will be disabled, and there will be nowhere to connect external ones - usb is also disabled. Of the minuses - usb is disabled (you can’t stick a flash drive anymore). Another minus, but this is not accurate, it seems that the latest editions of Windows can turn back on waffle modules on laptops directly from the operating system. Here a reliable way is to turn them off physically by disassembling the case.

(laptop, PC, etc., doesn't matter)

more importantly, on different devices this is done in different ways.

Answer 4

if another person sits down at the device, he will be able to find and turn it back on

Maybe if he has the right to do so.
And if you don’t give him such rights, he won’t be able to.

Answer 5

1. Disable the Ethernet adapter (LAN) in the BIOS
2. Physically extract (in the vast majority of laptops it is removable) the WiFi module. Alternatively, stupidly disconnect the antenna from it.
3. We put a password on the BIOS =) To not turn it back on =)
4. Security policy prohibits the installation of device drivers for non-administrators. Then even if the user brings a USB WiFi adapter with him, the system will not pick it up.
5. We put a firewall and set it to "prohibit everything". To change the password settings. You can even use the standard system through the "Windows Firewall" setting, or install something like Agnitum Outpost.

Answer 6

You can add values ​​to host and there will be no access at all.

Answer 7

Add the MAC address of the device to the blacklist of the router. Then change the password on the router. Change the password on the account, put the password on the BIOS. If the goal is to mock, then limit the user's access to system resources as much as possible.
Cut TCP by creating a rule in the firewall.