A whitelist should be a foolproof way to secure a relative’s PC. Select a handful of approved applications and only allow them to run. If someone using the PC downloads another .exe file, Windows will refuse to run it.
AppLocker does this, but it’s only included on Enterprise editions of Windows. We’ll be using the Family Safety feature for this — it’s like AppLocker in disguise for all editions of Windows.
This can really make a diffence. I have no time to write up a full post now, so read on here: http://www.howtogeek.com/195381/ensure-a-windows-pc-never-gets-malware-by-whitelisting-applications/