How would you enforce user PC to only connect to a given network? Answers need to be OS agnostic.
One weak solution could be to set client-side firewall rules to only allow communications with legit_IP_allowed_network, but this will not prevent user to set a malicious network with a spoofed_IP_allowed_network which is the same as legit_IP_allowed_network.
User PC should only be able to connect to a network if the network has something. But something that cannot be spoofed.
Any hints? Certificates? Proxies? Which one?