It depends on how they are connecting. If you are using per-user authentication (such as WPA2-Enterprise mode, splash page authentication with Meraki authentication, etc) you could just disable their account/deauthorise their account. Otherwise, you can't do anything. This is the #1 reason for using per-user WiFi authentication.
... View more