There are ways to do it without outside vendor downloads, but it would behoove you to use one of those just for simplicity sake. When you become familiar with windows system files, you can then make system changes for the effect you want. Also, if you go to CONTROL PANEL, USERS, you can limit his access as long as he is logged into his user name and doesn't bypass the log in process.... Remember to deselect the start menu and limit those other functions while creating his username and PW