Nuts's solution is theoretically correct; I add this caveat: make sure the account the kid uses to access the computer doesn't have administrator rights or he can just go back in and undo that change to the file.