Static IP on the windows machine in a jail’d subnet, if you still want to be able to access it from the LAN but don’t want it to have internet access.

If you’re happy with it not having any kind of network access, just disable the network adapter in windows.