AFAIK you can't turn off the administrator account. Having said that, if nobody has admin access how is your brother able to change the ACL of C:?