The problem with disabling it in DM is that when he reboots, it will find it again and put it back in. He could write a simple script to remove it from DM after each boot.
Edit: I was wrong. Win7 has the option to "disable" a device and that sticks through reboots. I was thinking about "uninstalling" and I believe if you do that, it will find it again and reinstall it as long as it's not disabled. So I agree, the easiest method is to disable it in DM and it will stay that way until you or some program enables it.