Locking down Windows 7?

[Lethal`]

Right, basically every few months I'm having to spend hours removing various viruses and rootkits that my brother has managed to download on this laptop. UAC is on etc but still some programs seem to be installed, is there any software I can use to lock down the system to prevent him installing software and just use the basic features. Internet etc...

Thanks!

 

[Lethal`]

Yeah the account is standard user. Version is Home Premium.

Currently trying to boot windows, it's in the startup repair loop and I have no access to a PC to access the hard drive externally with.

 

[Lethal`]

Yeah, the problem is I suspect the malware has infected the MBR and therefore Windows will not boot.

I have no idea if he had gained administrator access or not, I only seem to use this laptop when I'm fixing it.

Say I had Windows 7 Professional, what sort of local security policies would I be able to apply to help here?

 

[Lethal`]

educating him on safer internet usage an option?

Really doesn't work, he doesn't listen to anything.

I read before about some form of guest account which doesn't have personal directories and wipes everything clean everytime it is logged into. This would be good, if there were personal folders.