Block network access for a specific user on Windows 11 Enterprise by creating firewall rules targeting the user's SID, as Group Policy cannot restrict per-user Wi-Fi.