Maybe you should edit the local machine user settings!
And give your little prankster a own user account with lesser rights.