How are they removing system files when the machine is locked down? If you do not grant them local admin permissions and properly configure windows defender and remoting software that should be your solution. You can make the WiFi connection automatic/mandatory with local policies. I have to suggest the "locking down" part was not done properly or at all if a user was able to remove system files.