I have an exchange student at home and I would like to set-up a restricted account on the family computer. Basically, he should be able to run only the Office Pack and surf the web. I don't want him to be able to tweak anything in the Operating System, nor install programs, etc. I have win 7 Ultimate
So far I have created an account an applied Parental Controls restrictions, plus defined disk quotas. I have activated UAC at level 1. However it is still possible to run a command prompt and I don't know what else.
What else shall I do ?