Desktop would be fairly easy since they don't usually come with built-in wifi. As long as the built-in Ethernet port is disabled or cable not plugged in, there will be no internet access.
No matter what, a savvy user would be able to plug in a USB wifi adapter to be able to access wifi. The way to stop that would be to have a wifi password that the user does not have knowledge of.