My father, the retired technician, would immediately go into the settings and start making changes even though he didn't understand what he was doing and would forget what he had done. I got tired of guessing.
I was amazed that I couldn't find software to lock him out of making changes. I tried a few, but like a teenager, he found ways around them. So I sat down and with a long list locked him out of installing software, remote access, settings, etc. It took a long time, but I nailed down about 95% the first time, then swept up the last bits later.