Static IP on the windows machine in a jail’d subnet, if you still want to be able to access it from the LAN but don’t want it to have internet access.

If you’re happy with it not having any kind of network access (I’m not sure if when you say ‘locally’ you mean just physically, or it needs LAN as well), just disable the network adapter in windows.