You can't.
If you need to lock down the device, use a Managed Guest session, or a Kiosk.
Then it will only be able to access the resources you want, or nothing.
But you can't disable the network remotely, because then he device will not know when it is allowed to access the network again.