I've been asked the following. Is it possible and if so how?
A laptop (used by numbers of people, limited physical control of settings) has a physical connection to an internal (private stuff) DNS controlled network. The location also has an open wireless point to an external network. It is of great importance that people can not get from the outside network onto the internal network.
The same laptop also has a wireless which someone has configured to use the open wireless.
So the question is how can one stop a user (not administrator) of the laptop turning the wireless functionality on ? It is required that the wireless is turned off for non-administrator users, but allowed to be on for members of the admin group.