Without having authority to access the company's server and such, there is nothing he can do short of hacking into the system. Most probably though if he tries, eventually he will set off an alarm somewhere and they will fire him. As it is now, any time he tries to access a restricted site, it is logged. If he really really needs net access and they won't give it to him, then an alternative would be a laptop with a modem he can plug in at work or wireless service if it is available in that area.