Block the entire tablet. They know they are breaking the rules, be more assertive. Change the admin password on the router first. The block that MAC address. They may be able to spoof the MAC address. If so then change the WIFI password and don't give it to them.
You have a political problem rather than a technical problem. But, if you are the adult, you need to act like one.