Fool proof student account

[julot]

Hi,

I have an exchange student at home and I would like to set-up a restricted account on the family computer. Basically, he should be able to run only the Office Pack and surf the web. I don't want him to be able to tweak anything in the Operating System, nor install programs, etc. I have win 7 Ultimate

So far I have created an account an applied Parental Controls restrictions, plus defined disk quotas. I have activated UAC at level 1. However it is still possible to run a command prompt and I don't know what else.
What else shall I do ?

Thanks in advance.

 

[sminlal]

You should also configure the BIOS so that it can't boot from any removable media and set a password so that the configuration can't be changed.

 

[julot]

You should also configure the BIOS so that it can't boot from any removable media and set a password so that the configuration can't be changed.

Thanks but I already did this long ago. What I am really after is to replicate the typical win7 configuration that you find in any internet cafe,

 

[sminlal]

There are a truckload full of group policy settings that you can fiddle with using the Group Policy snap-in of the MMC (Microsoft Mangement Console). Browsing through them may give you some ideas.