I don't usually suggest proxies for security but in this case. Most windows based proxies (there is a free one from 602 software that is decent) will not only let you share an internet connect, but also restrict network access by user and time. So setup a user for this guy, and restrict that users access (some firewalls can do this also...but they would have to be software based on your box)