Win7 Parental Controls -- School HomeWork Versus The Tech-Addict-Teen
Here's how I've used Win 7's Parental Controls to make my resident Tech-Addict-Teen's PC a tool for both distraction-free homework and also for recreation, once homework is done. Step 1 : Secure the computer case (less of a problem with note/net-books than with desktop workstations) -- most modern workstation cases have an integral lock or a slot for a small padlock to prevent physical access to the motherboard, etc. The goal is to prevent a Tech-Addict-Teen from being able to reset ("jumper") BIOS settings back to their (insecure) default values, or swap-in a new disk drive, etc. Step2 : Once the Operating System ("O/S") has been installed, configure the BIOS so that the system cannot be booted from any device other than the main hard disk and then password protect the BIOS setup. The goal is to stop the PC from being booted from a CDROM/DVD/USB/ etc. drive and prevent either re-installation of the main O/S or installation of a second O/S, such as linux, where, in both cases, Tech-Addict-Teen would have free rein. The only boot-able O/S should be the "official" one on the hard disk, replete with parental controls. Step3 : Using Windows 7 (or Windows Vista) as the O/S, create three accounts: A) One password-protected, account with Admin privileges (the responsible Parent's account). B) One password-protected, non-admin, recreational account for Tech-Addict-Teen (who should not know the password). C) One non-admin account, for Tech-Addict-Teen's school homework. Install Norton Internet Security "NIS" (or similar product such as McAfee, Net Nanny, etc) with Parental Controls to control access to the Internet. Password protect it (usually, a product feature) to prevent unauthorized changes to the settings. Tests with NIS 2010 + AOP (Add on Pack) revealed it is possible to very quickly login and start a browser session to an unauthorized website while NIS Parental Controls are still being loaded by the O/S and not yet fully operational -- the "root cause" was identified Jan 7, 2010, by Symantec but Symantec is unable/unwilling to fix the Parental Controls AOP and recommends using Online Family instead. Also, unless the Internet Parental Control software you are using blocks https for sites on the not-permitted list (otherwise https://www.facebook.com etc., can be accessed just fine), you may have to block https for the IP address associated with Tech-Addict-Teen's computer on your router -- use the unique MAC address for Tech-Addict-Teen's PC to assign the same IP address everytime and then block https for that IP address, but you'll need to unblock https periodically to run Windows update and apply critical patches. For the Tech-Addict-Teen homework account proceed as follows: (a) using Windows 7 (or Vista's) Parental Controls, block the program launch of all games and all programs, except those programs genuinely required to complete homework assignments (see candidate list below) so as to eliminate Instant Messaging and other time consuming distractions during homework hours. Also block execution of java.exe to indirectly disable games that require client side java (e.g Runescape, Minecraft, etc) and are otherwise difficult to control. (i) a Word-processor (e.g. WinWord, OpenOffice Writer, or similar) (ii) an Internet browser (e.g. Internet Explorer, Firefox, Chrome, etc) (iii) Acrobat reader (b) Using an Internet Parental Controls software application, block all websites except the handful of websites genuinely required to complete homework assignments, for example: (i) the school website to download homework assignments/materials (ii) www.wikipedia.org (iii) dictionary.reference.com For the Tech-Addict-Teen's recreation account, use Windows 7's (or Vista's) Parental Controls to limit internet usage time, use the program launch and games restrictions of the Parental Controls feature to ensure objectionable games are not being played and use Internet Parental Controls software to block access to pornographic websites, etc. If Tech-Addict-Teen can be relied upon to complete his/her homework by say 8 p.m. each evening, the recreation account need not be password protected, but merely have time-based Parental Controls set, so it can only be used between the hours of say 8 p.m. and 10 p.m. each weekday. I hope this helps responsible parents, with irresponsible teenagers, regain their sanity and ensure their kids do as well in school as Bill Gates so obviously did!
November 16th, 2009 9:39am

Hi Cest-Moi, thank you for sharing the solution and detailed steps with us. I believe this should be very useful to our Windows 7 users.Sean Zhu - MSFT
Free Windows Admin Tool Kit Click here and download it now
November 18th, 2009 10:06am

this is a great thing for the not so computer smart teens but for a true computer smart teen there are some very easy things to do to get around most of the things you suggest i am a president of a award winning tech club, computer builder, programer and "Tech-Addict-Teen" Step 1 : Secure the computer case (less of a problem with note/net-books than with desktop workstations) -- most modern workstation cases have an integral lock or a slot for a small padlock to prevent physical access to the motherboard, etc. The goal is to prevent a Tech-Addict-Teen from being able to reset ("jumper") BIOS settings back to their (insecure) default values. this is very bad for the case, slots are for securing to computer to something with a NON-METAL device a lock on a tower slot could case problems with the computer or even short it out Step2 : Once the Operating System ("O/S") has been installed, configure the BIOS so that the system cannot be booted from any device other than the main hard disk and then password protect the BIOS setup. The goal is to stop the PC from being booted from a CDROM/DVD/USB/ etc. drive and prevent either re-installation of the main O/S or installation of a second O/S, such as linux, where, in both cases, Tech-Addict-Teen would have free rein. The only boot-able O/S should be the "official" one on the hard disk, replete with parental controls. i don,t need BIOS or CIMOS to install an os i can partition a hard drive and install it on that partition or on a large flash drive or external hard drive (also you flash the CIMOS not the BIOS) Step3 : Using Windows 7 (or Windows Vista) as the O/S, create three accounts: A) One password-protected, account with Admin privileges (the responsible Parent's account). B) One password-protected, non -admin account for Tech-Addict-Teen (who should not know the password). C) One non -admin account, for Tech-Addict-Teen's school homework. keylogger, password cracker there is no block to prevent installation of software (thats how i found this page, sister keeps installing viruses on my comp) Install Norton Internet Security (or similar product such as McAfee) with the Parental Controls option to control access to the Internet. Password protect Norton Internet Security (a product feature) to prevent unauthorized changes to the settings. Recent tests have revealed that is sometimes possible to very quickly login and start a browser session to an unauthorized website because NIS Parental Controls are still in the process of being loaded by the O/S and not yet fully operational -- the root cause has now (Jan 7, 2010) been identified, Symantec is working on a fix and a link to the fix will be posted here as soon as it is available. norton in its self is a virus that detects other viruses and can destroy your computer also McAfee cant even detect a mini virus i wrote to test it I hope this helps responsible parents, with irresponsible teenagers, regain their sanity and ensure their kids do as well in school as Bill Gates so obviously did! this is insulting also albert Einstein did not finnish his schooling and bill gates did not graduate from collage
January 13th, 2010 2:59am

And how exactly does a parent prevent Tech-Addict-Teen from booting into Safe Mode which can be used to completely undo all the changes parent put into place?
Free Windows Admin Tool Kit Click here and download it now
July 11th, 2010 8:05pm

In theory perhaps, by using bcdedit to manipulate Windows (Vista/Win7) Boot Manager and eliminate the Safe Boot options -- have not had much success with that approach, as yet. However, in practice: 1) Registry Hack (Win7) create a System Repair Disk as an 'insurance' policy. run a Command Prompt as Administrator and invoke regedit . find the SafeBoot registry key, export it to a USB thumb drive and keep that in a safe place somewhere. unprotect the SafeBoot branch and all its children -- http://www.mydigitallife.info/2009/09/02/grant-read-write-full-control-permissions-on-registry-keys-fix-cannot-import-and-access-denied-error-in-regedit/ so, as Administrator, you can delete the SafeBoot key. Delete the SafeBoot key from the Windows Registry. I tested the SafeBoot key deletion technique with Win7 (64 bit) and choosing any F8 Safe Boot menu option resulted in an immediate reboot on my PC. I also successfully tested importing the previously exported SafeBoot registry branch and returning to normal F8 boot behavior. However, no express or implied warranties here. 2) Alternatively, check out this blog and NoSafeMode software, albeit, downloading and/or installing it may pose a security risk (who knows?), whereas the Registry Hack (Win7) and the ntldr (pre Vista/Win7) hack likely do not. http://www.raymond.cc/blog/archives/2009/04/30/disable-f8-key-to-block-access-to-safe-mode-during-windows-startup/
August 14th, 2010 7:08am

Cest Moi Basically what you are doing is blocking the kids wish to express himself and turning him into a rebel since he NEVER can feel the freedom of the internet or his own choices at least on the home computer. IMHO if the kid does its homework and is good in school there really is no need to restrict his computer access. Just check out history what he/she was doing and have a nice friendly talk if he was doing something not to your liking. Just don't be too restrictive. You were a teen once also. btw. Why are you restricting pr0n? He can just as well go out rent a pr0n video or buy a magazine or even better go to a friends house's computer.
Free Windows Admin Tool Kit Click here and download it now
August 15th, 2010 6:00pm

ashrack, There is much scientific evidence that the frontal lobes ("thinking part") of the brain undergo significant change between teenage and adult years. In teenagers, this area of the brain is not fully developed. People mature at different rates -- at a given age, some teenagers are more mentally mature than others. Some are responsible and ensure their school homework gets done on time with good quality. Others do not, for a variety of reasons. A common reason is succumbing to distractions, for example, Games, Social Networking sites, Instant Messaging, etc., that are so easily accessible from a personal computer. In the real world, there is a correlation between level of education and income. Therefore, responsible, caring parents try to ensure their children get the best education they can. Parents blessed with mature, responsible teenagers will likely not need the information shared above. Those less fortunate may find some of the information shared above helpful in keeping teens on track, until such time as their frontal lobes have fully evolved and they are able to make good decisions. C'est Moi
August 17th, 2010 6:12am

I had been using Microsoft Parent Control to limit my son's Internet and gaming time as gaming affects his acdemic study, this worked . But now he found a way to reset the Windows 7 Administrator password and all the parent control feature no longer work as he became the administrator. So the questions is how to prevent the kid to reset my administrator account password on a Windows 7 home edition Dell Desktop?
Free Windows Admin Tool Kit Click here and download it now
March 18th, 2012 11:14am

Unfortunately, there are several applications, accessible via the Internet, that enable Windows passwords to be "recovered", even for Administrator accounts -- seemingly, your son found one. Kids today interact with each other frequently, often via text messages, Instant Messaging, Facebook, etc., and also use Google to find "workarounds" for controls, created by parents, while awaiting the arrival of mature, responsible behavior. Playing games, with buddies, over the Internet is the big attraction for kids/teens. Such games are designed to be addictive and often become time consuming distractions to homework and other important activities. Blocking all Internet access is generally not an option because of the gray area where your kid says he/she needs access to the Internet in order to complete a homework assignment (and not to play Internet games -- no, honestly Dad!). In this case, it is best if parents have frequent visual contact with the PC, until the assignment has been completed. Ideally, your network equipment (routers, etc) should be physically secured (e.g. in a well ventilated, but locked closet) and you must protect associated network configurations with a strong password, known only to parents. Otherwise, it will only be a matter of time until your technology-savvy kid/teen modifies the network configuration to their advantage. Media Access Control, "MAC", addresses can be easily spoofed when Windows Administrator privileges are to hand. That makes controlling Internet access at the router level (e.g. by using Dynamic Host Configuration Protocol, "DHCP", to consistently assign the same Internet Protocol, "IP", address to a given MAC address, then block access to specific web-sites, port ranges, etc., for the assigned IP address), quite challenging, especially in a household with several computers, of which, some are used by responsible family members. Reading and thoroughly understanding the User Guide(s) for your network equipment will be your "homework" assignment, if you go this route.
March 28th, 2012 10:45pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics