deny his MAC address. That'd require figuring out which is his. If he's the only person online at some time it would be obvious.

Then he goes and buys an(other) card... oh well, can't beat it.

=e