OK then ban them from connecting to your active web services. But don't prevent their PC from booting.