Safeguarding Windows 7 – Parental Controls


As you can imagine, our team is quite busy working through this next phase of Windows 7.  We definitely appreciate the millions of downloads and installs of the Windows 7 RC.  Things are going as we expect at this point.  On a personal note, I wanted to thank all the folks who have been sending me mail.  I’ve received a lot of kind words and support regarding the RC and quite a few people saying “hurry up and just release it”.  We outlined the steps we’re taking for this next milestone and aren’t going to rush things.  We’ve got a lot of work for sure!  Not that I’m counting, but I just crossed over 3,000 emails sent via the contact link in this blog.  While I haven’t answered all of them, I’ve done the best I can, and appreciate each and every exchange. 


Windows 7 includes a set of features for safeguarding your PC when used by children.  This post is by Vladimir Rovinsky, a program manager on our Safety Team, who details the features in Windows 7 specifically around Parental Controls.  This work is in addition to the safety of the OS itself and of course the features built into Internet Explorer to provide safety and security while browsing.  You might also want to check out Windows Live Family Safety which is part of Windows Live Essentials (http://download.live.com) which provides even more for safety and parental controls.  –Steven


Today, children are exposed to digital hazards more easily than any time in the past. Especially with the help of powerful search tools, convenient social networking applications, low cost tools and services for publishing videos and photographs, the web is awash with content that’s inappropriate for children, and full of people that parents want to bar from contacting their children.


These digital hazards are accessible to children through a variety of applications, including web browsers, instant messaging applications, media players, games, and email applications. Many of these applications have attempted to offer parental control features. However, they offer this functionality through variety of user interfaces, locations and include varied terminology. The duplication and inconsistency of parental control settings management can make it difficult for parents to maintain the correct settings across multiple applications.


Windows Vista Parental Controls provided a framework to solve these problems by offering:



  • A single, central location in the Windows Control Panel to configure and manage parental control settings and activities;

  • Built-in restrictions on web content and file downloads, time spent on the computer, application usage, game usage as well as the ability to log and view user activity.

  • The Windows Parental Control platform public application programming interfaces (API) which expose in-box restriction settings and logging functionality to any application. For instance, Internet Explorer and Mozilla Firefox 3.0 are using these APIs to determine if file downloads should be blocked for a user.

  • Integration with the User Account Control (UAC) to enforce standard user accounts for parentally controlled users; promotion of best practices for keeping kids safer on a Windows computer; for instance, encouraging the creation of separate standard accounts for managed children, password creation for parent accounts (administrators), etc.

To get a quick demo of Windows Vista Parental Controls in action, check out this video.


For more information about developing software for Windows Vista Parental Controls, see Using Parental Controls APIs.


Key Design Decisions for updates to Windows 7 Parental Controls


Responding to customer feedback and evolving nature of the web and challenges it poses to the parents, we strive to provide families with flexible and effective safety features. Our efforts for the Windows 7 release of Parental Controls were focused on the following objectives:


1. Further developing the extensibility of the Parental Controls platform to enable third-party developers to create richer Parental Control capabilities that integrate well with Windows 7 Parental Controls.


The Windows 7 Parental Controls platform was modified to allow multiple independent providers of Parental Controls functionality to be installed on the system and augment or fully replace the parental controls provided by Windows 7. Windows Vista allowed partial replacement of Windows Parental Controls; the web filter was replaceable. In Windows 7, in addition to the web filter components, the entire Windows 7 Parental Controls user interface can be replaced by third-party providers. The underlying enforcement of the offline restrictions will still be performed by Windows Parental Controls platform. Allowing a third party provider to replace the entire Windows Parental Controls user interface creates a consistent user experience that seamlessly combines existing Parental Controls functionality with the new ones introduced by the third-party provider.


The Windows Control Panel Parental Controls screen still remains the central location and launching point on Windows 7 for Parental Controls functionality regardless of whether it is provided by default (system) or by a third-party provider.


2. Removal of web content restrictions and activity viewing functionality from default (system) Parental controls provider and reliance on Windows Live or third-party providers for these capabilities.


The web is changing much faster than we can update the Windows operating system. For example, when Vista was released Social Networking was barely known. Now it has a thriving web presence. We need to keep web focused parental controls up with innovation. Because of this, we have moved them into Windows Live.


Web filtering and activity viewing capabilities can be more efficiently provided by Windows Live or a third-party solution that implement web based delivery of this functionality. For instance, Microsoft’s Windows Live Family Safety free application provides web content filtering, file downloads restrictions, and activity monitoring. It also provides online contact restrictions for children using Windows Live online applications (Windows Live Hotmail, Windows Live Messenger, etc).


You can learn more about Windows Live Family Safety solution here.


More information about Windows 7 changes to the Parental Controls platform can be found here.


Windows 7 Parental Controls User Interface Changes.


Elements new to Windows 7 Parental controls top-level screen can be seen on the following screen shot:


Figure 1    Windows 7 Parental Controls screen


Figure 1 Windows 7 Parental Controls screen



  1. The Additional controls section allows users to select a provider for additional controls such as web filtering, activity reporting, online contact management, etc. When a third-party controls provider’s installed on the computer, the screen displays the Select a provider drop down box that shows the currently selected (active) provider. A description of the provider’s functionality, as supplied by the provider, is shown below the drop down.

  2. When the user account is selected by clicking user’s name or picture, the provider configuration for the user is launched. The provider can take over the default configuration UI for the in-box offline restrictions.  Optionally, provider generated status strings for user accounts are displayed under user account pictures.

  3. An Icon supplied by provider is shown in the upper right corner of the screen.

Additional control providers can still rely on the default’s (system) provider UI for the configuration of in-box offline restrictions. If a provider chooses to do so, the User Controls screen can be presented to configure a user’s Parental Controls settings.


If an additional provider is selected and configured, the following new user interface elements are shown on the Windows 7 User Controls screen:


Figure 2  Windows 7 User Controls screen. Additional controls provider is installed and configured.


Figure 2 Windows 7 User Controls screen. Additional controls provider is installed and configured.



  1. More Settings allows direct access to the currently selected provider’s functionality.

  2. Web Restrictions allows access to the currently selected provider’s functionality.

Windows Parental Controls settings and Vista to Windows 7 upgrade


If a Windows Vista PC which has parentally managed user accounts with enabled web filtering restrictions is upgraded to Windows 7, parents (administrators) are warned during the upgrade as well as when opening the Windows 7 Parental Controls screen, that web filtering and activity reporting functionality is not part of Windows 7 Parental Controls.


Figure 3  Windows 7 Parental Controls screen. Some users have web filtering restrictions. No additional provider is installed.  


Figure 3 Windows 7 Parental Controls screen. Some users have web filtering restrictions. No additional provider is installed.


Windows Vista Parental Controls settings (including web filtering and activity logs information) are preserved unchanged when upgrading from Windows Vista to Windows 7. Although web filtering settings and activity logs information are not used by Windows 7 Parental controls, their preservation allows third-party provider to honor these settings.


As you start using Windows 7, we hope these changes to Parental Controls capabilities will make you feel more confident and in control of how your family members are using computers and experiencing the web.


–Vladimir

Comments (37)

  1. vistisen says:

    A feature I would like to see is that ability to set a maximum amount of time that a child can use the computer. I know that I can regulate when my children can log on. But the rules in our house are simple. For example "You can use the computer an hour each day". I have written a WSH script that can log them off after an hour. But this can easily be defeated (although they have not worked it out yet 🙂 by logging on and off every 59 minutes! It would be nice to be able to set a maximun number of minutes an account can be logged on during 24 hours (time sent with a screensaver og locked screen subtracted). Possibly with even more granulated control, for example games can be played for an hour but browsing the net for homework (not games sites, youtube and others) can be done for more than an hour and so on

  2. Tihiy says:

    Don’t hurry up, don’t release it! You can still make it better and you know how.

    As for parental control, consider more sophisticated time control… for Win 8.

  3. gauravkale@vista.aero says:

    What about domain-joined computers? Earlier Parental controls couldn’t be used for domain joined PCs. Also, it would be so much an improvement if the web-based UI of Family Safety was replaced by a rich desktop-based one, that is, if Windows Live replaced/extended the in-box UI on Windows 7 instead of a web-based one.

  4. anonymuos says:

    Do "Application Restrictions" use AppLocker on Windows 7?

  5. swwhittle@gmail.com says:

    I would be interested in being able to lock programs for certain times during the day.

    Say I had a public access account that but only was willing to let people use a particular program at particular times (either kids can only play game X between 4-5pm or use programs that use significant bandwidth when they won’t cause problems for servers/internet speed)

  6. Jwolf says:

    The only problem I have with the Windows live web filter is speed. It slows down web browsing considerably compared to the Vista filter. IE 8 seems to be very responsive in the 7 RC release. If only the speed of the filter could be increased. Keep up the good work, I’m loving 7 overall!

  7. imranmd07 says:

    This is not a specific comment on Parental Controls as I have not yet studied on this article. I will go through this and will make my comments. I just scrolled the page and got confused about the window. At first look, you cannot make out whether the pictures are from Vista or 7 based OS’s. There should be something that would differentiate 7 from vista. Perhaps, you could have some text at the title bar saying Windows 7. Sorry for posting in this section.

  8. orelzion says:

    Hi!

    Great work so far. As for parental control, it’ll really be useful if you ask after any installation of a program if it’s allow to be used by the child. Right now it’s really annoying keeping up for me.

    Thanks a lot.  

  9. Asesh says:

    Great work guys. But why can’t the icons in the superbar just like in Mac OS X, be aligned in the middle? As usual since Windows 95 it’s always aligned to the left and is not customizable. Please make it customizable. Thanks

  10. Moonsurfer_1 says:

    Hi, great work! I’m a student computer sciences from Belgium and i’ve been using the beta and the rc since they came out, and i’ve been reading this blog also, and now with the rc, everything is running really smooth! Well done! Hopefully you could even get some more performance boosts before reaching rtm.

    But I’ve got a question, and it might be a lot off-topic, but about it’s about MUI in windows 7:

    Will it – in the future- be possible to change the WHOLE interface to another language? Because I’ve changed to dutch, but there are still a few things in plain english… Not that I can’t manage, but it just annoys me a little bit… The logon-screen for example still shows "Welcome" instead of "Welkom". Or in the system dialog it shows "Pen and Touch: No pen or touch is available for this display" instead of "Pen en Touch: Pen en touch is niet beschikbaar op dit scherm".

    It’s not really a big deal, but it would really refine the experience of the user. That way you wouldn’t have to ship multiple different localised versions either.

    I hope you would consider this, but for now I think you’ve all done a great job!

    Keep up the good work!

    Philippe

    Student Computer Sciences

    Belgium

  11. bobharvey says:

    You cannot automate good parenting.  It’s better to browse together, like reading together, until you have taught a child to behave responsibly.  

    Parental controls are a bit like using the TV as an electronic babysitter.

  12. fabler says:

    I’m very disappointed when I saw that web filter is removed from parental control in windows 7 RC. I read that its replaced by family safety of windows live. I’ve also tried the family safety but it has disappointed me again. Because familey safety is not as good as the web filter of parental control. Its bit slower than web filter. So, why don’t you keep web filtering in parental control as its useful for people who want to block some web access and also want some reporting of their children’s activities..

    I’m waiting for the reply.

    Thanks

    Fabler..

  13. honzon says:

    modern classic furniture

    htpp://www.honzon.com

  14. Project Management degree says:

    Say I had a public access account that but only was willing to let people use a particular program at particular times (either kids can only play game X between 4-5pm or use programs that use significant bandwidth when they won’t cause problems for servers/internet speed)

  15. webtasarım says:

    windows 7 operating system will be a good users as the best way we in the opinion, trying to use the article, thank you

  16. vladimir_rovinsky says:

    Fabler,

    Thank you for giving a try to the product and taking time to share your experience and thoughts with us. There are several reasons for pulling web filtering and activity reporting from Windows and allowing third-party solutions, like Windows Live Family Safety to  provide this functionality; among them: ability to update this functionality without waiting for the next Windows release;  response to customers requests to enable configuration of web filtering settings and review of activity reporting from any web connected PC (for instance, parents can review and respond to children’s requests for viewing a specific website from their office computers); ability to aggregate in one place settings and reports for multiple home PCs. We feel that moving web filtering configuration and reporting functionality to the Windows Live Family Safety will benefit majority of our customers by enabling the desirable scenarios described above.

    Web filter performance is one of the top priorities in our continued effort to improve Windows Live Family Safety. We have made several substantial improvements in its responsiveness since June and will continue to investigate ways to achieve better performance in this area.  

    Thank you,

    –Vladimir

  17. vladimir_rovinsky says:

    Sevenflavor,

    The Parental Controls UI can be made visible and may be used on non-domain-joined accounts on domain-jointed machines. There is a Group Policy setting that controls it:

    1. Run gpedit.msc (Start->All Programs->Accessories->Run…)

    2. In the left-side tree, drill down as follows:  Local Computer Policy->Computer Configuration->Administrative Templates->Windows Components->Parental Controls

    3. Set the “Make Parental Controls control panel visible on a Domain” policy to Enabled

    4. Exit gpedit

    5. Log out and back in

    6. The Parental Controls UI will now be visible.

    Hope this helps,

    –Vladimir

  18. cash gifting says:

    i dont really have kids of any age that i would need to use these controls for but sure they will be useful in the future

  19. web-tasarim says:

    I congratulate the family of 7 products microsoft windows vista windows than to high-performing and visually richer … Congratulations windows7.

  20. web.tasarım says:

    Thanks for the very informative and enlightening documents. Thanks to myself every day for more of you..

  21. Kiiski says:

    I never use that parental conrtol before (i allready installed it). But when i try to set it up, it wont let me log in, because every time it ask one of my parents log in. I´m 52 year old, oldest person in this house, mom and dad are dead god shake, so what to do now?!?! Should i think to give myself in some adobtions program to get new parents just login my parental control?

  22. In Pure Math, you will most likely be a Teacher.

    In Applied Math, you have the option of becoming a teacher as well as branch out to research and the most famous job, Actuarial Science.

  23. tilf says:

    its pretty uncivilised how the parental controls on instlling and using programs work. whenever i want to even update necessary things like spyware doctor, i need my parents pass which is stupid because i have access to change their pass anyway (cmd, net user {your parents log} *). wtf to parental controls please inprove this fatal flaw

  24. <a href="http://www.tendances-de-mode.com/">Tendances de mode</a> says:

    Mmmm, interesting. Do "Application Restrictions" use AppLocker on Windows 7?

  25. Mmmmmm, interesting. Do "Application Restrictions" use AppLocker on Windows 7?

  26. Tasarim says:

    Really interesting…

  27. Anksiyete says:

    Really nice news guys anksiyete panik atak deporesyon tedavisi!!!

  28. You cannot automate good parenting.  It’s better to browse together, like reading together, until you have taught a child to behave responsibly.  

    Parental controls are a bit like using the TV as an electronic babysitter.

  29. Oyun Forum says:

    I congratulate the family of 7 products microsoft windows vista windows than to high-performing and visually richer … Congratulations windows7.

  30. hidrolipo says:

    As for parental control its a controversial matter. it’ll really be useful if you ask after any installation of a program if it’s allow to be used by the child. Right now it’s really annoying keeping up for me.

  31. hmm says:

    Thank you for giving a try to the product and taking time to share your experience and thoughts with us. There are several reasons for pulling web filtering and activity reporting from Windows and allowing third-party solutions, like Windows Live Family Safety to  provide this functionality; among them: ability to update this functionality without waiting for the next Windows release;  response to customers requests to enable configuration of web filtering settings and review of activity reporting from any web connected PC (for instance, parents can review and respond to children’s requests for viewing a specific website from their office computers); ability to aggregate in one place settings and reports for multiple home PCs. We feel that moving web filtering configuration and reporting functionality to the Windows Live Family Safety will benefit majority of our customers by enabling the desirable scenarios described above. Thanks <a href="http://www.oyunoyna.com&quot; target="_blank">oyun</a>

  32. jay says:

    ive installed gta 4 on windows 7 …. and when i try to run it it says the application is blocekd due parental settings …..plz tell me what to do !!!!

  33. Parental Monitoring says:

    Although your kids’ best online protection is you, and by talking to them about potential online dangers  and monitoring their computer use, you’ll help reduce the risk while they surf the Internet. Using some form of keystroke or parental monitoring tool can be seen by some as an invasion of your child’s privacy, but many parents are turning to this style of technology knowing the severity and risk regarding on-line predators.<a href="parentalmonitoring.info/">Parental Monitoring</a>

  34. John says:

    Thanks for sharing.<a href="http://yabancidiziizle.net">yabancı dizi izle</a> Very nice article.

  35. John says:

    Thanks for sharing.http://yabancidiziizle.net yabancı dizi izle Very nice article.

  36. Marie W says:

    Warning- Parental Controls can be disabled !

    My son with Autism, just turned 13. He has an HP computer. I set up windows parental controls on it. He has never studied any computer programing. He pressed F11 before windows starts up. He then does a system recovery to get rid of the old adminstation account and all the parental controls. He creates a new admin account using his name. I am unsure how to prevent him from doing this again. Any ideas?

  37. Diana says:

    Thanks this article really, really useful. problem is solved. Thanks <a href="http://www.oyuntab.com/&quot; target="_blank">oyun</a>