[joesmo]

Here's a couple of things you can try:

* Drop linux on it with a simple GUI on it and lock the machine down. Don't give him root access or admin rights. Make sure the machine updates and backs itself up without intervention. * Set up his browsing inside a vm that gets recreated on boot (any host OS, linux as guest would be ideal but any will do).