Just exclude his MAC address on the router. This would cause him to have a stand alone computer without an internet connection. No more downloads.

Edit> Or if he is the wireless client on the...