>>384389Well, the easiest is going via the router. Access the web interface by typing its IP address as URL in your browser from the intranet. Most likely you're running a DHCP server (automatically allocating IP addresses to devices connected to the network).
The targeted way would be to find out his computer's MAC address (either locally or via the DHCP table on the router) and ban that MAC address specifically. For details I have to refer you to the handbook which you can probably download from ASUS.
The result is that his LAN device will not be accepted anymore by the router, permanently locking his computer out from the network (until he gets another LAN card / mainboard or figures out how to spoof MAC addresses), but allowing all other devices still access.
The broader variant would probably be to just turn off DHCP on the router and switch to a different range (instead of
192.168.0.XXX to say
192.168.185.XXX). Then you would have to switch all devices that should still connect to a fixed address on the new range, including your computer. Be careful - as soon as you hit save on the router settings you won't be able to access it anymore until you manually assign an appropriate IP (and probably restart your computer).
The effect is that no device can access the LAN unless it is assigned a suitable IP manually.
The quick and dirty solutions locally on his PC depend on how tech savvy he is. From taking away his LAN cable, manually assinging him a wonky IP that doesn't mesh with the router, messing with his preferred DNS servers, writing some funny stuff into his windows host file, etc.
If you have complete access the easiest and most effective by far is probably disabling the onboad LAN in the BIOS and then putting a BIOS supervisor password on.
All that stuff is possible, but if and how it works depends on make and model of all components involved. When in doubt just poke around or read manuals.
