Restricting access to unknown networks.

I am configuring school district iPads. I would like the iPads to ONLY connect to the schools district's secure network. What setting controls which networks they can log into? I already have the profile allowing them to the schools district's secure network. I am trying to exclude all others such as public networks at star bucks. This would reduce the desire to steal the i pads.