Engineering Windows 7

Welcome to our blog dedicated to the engineering of Microsoft Windows 7

Safeguarding Windows 7 – Parental Controls

Safeguarding Windows 7 – Parental Controls

  • Comments 37

As you can imagine, our team is quite busy working through this next phase of Windows 7.  We definitely appreciate the millions of downloads and installs of the Windows 7 RC.  Things are going as we expect at this point.  On a personal note, I wanted to thank all the folks who have been sending me mail.  I’ve received a lot of kind words and support regarding the RC and quite a few people saying “hurry up and just release it”.  We outlined the steps we’re taking for this next milestone and aren’t going to rush things.  We’ve got a lot of work for sure!  Not that I’m counting, but I just crossed over 3,000 emails sent via the contact link in this blog.  While I haven’t answered all of them, I’ve done the best I can, and appreciate each and every exchange. 

Windows 7 includes a set of features for safeguarding your PC when used by children.  This post is by Vladimir Rovinsky, a program manager on our Safety Team, who details the features in Windows 7 specifically around Parental Controls.  This work is in addition to the safety of the OS itself and of course the features built into Internet Explorer to provide safety and security while browsing.  You might also want to check out Windows Live Family Safety which is part of Windows Live Essentials ( which provides even more for safety and parental controls.  --Steven

Today, children are exposed to digital hazards more easily than any time in the past. Especially with the help of powerful search tools, convenient social networking applications, low cost tools and services for publishing videos and photographs, the web is awash with content that’s inappropriate for children, and full of people that parents want to bar from contacting their children.

These digital hazards are accessible to children through a variety of applications, including web browsers, instant messaging applications, media players, games, and email applications. Many of these applications have attempted to offer parental control features. However, they offer this functionality through variety of user interfaces, locations and include varied terminology. The duplication and inconsistency of parental control settings management can make it difficult for parents to maintain the correct settings across multiple applications.

Windows Vista Parental Controls provided a framework to solve these problems by offering:

  • A single, central location in the Windows Control Panel to configure and manage parental control settings and activities;
  • Built-in restrictions on web content and file downloads, time spent on the computer, application usage, game usage as well as the ability to log and view user activity.
  • The Windows Parental Control platform public application programming interfaces (API) which expose in-box restriction settings and logging functionality to any application. For instance, Internet Explorer and Mozilla Firefox 3.0 are using these APIs to determine if file downloads should be blocked for a user.
  • Integration with the User Account Control (UAC) to enforce standard user accounts for parentally controlled users; promotion of best practices for keeping kids safer on a Windows computer; for instance, encouraging the creation of separate standard accounts for managed children, password creation for parent accounts (administrators), etc.

To get a quick demo of Windows Vista Parental Controls in action, check out this video.

For more information about developing software for Windows Vista Parental Controls, see Using Parental Controls APIs.

Key Design Decisions for updates to Windows 7 Parental Controls

Responding to customer feedback and evolving nature of the web and challenges it poses to the parents, we strive to provide families with flexible and effective safety features. Our efforts for the Windows 7 release of Parental Controls were focused on the following objectives:

1. Further developing the extensibility of the Parental Controls platform to enable third-party developers to create richer Parental Control capabilities that integrate well with Windows 7 Parental Controls.

The Windows 7 Parental Controls platform was modified to allow multiple independent providers of Parental Controls functionality to be installed on the system and augment or fully replace the parental controls provided by Windows 7. Windows Vista allowed partial replacement of Windows Parental Controls; the web filter was replaceable. In Windows 7, in addition to the web filter components, the entire Windows 7 Parental Controls user interface can be replaced by third-party providers. The underlying enforcement of the offline restrictions will still be performed by Windows Parental Controls platform. Allowing a third party provider to replace the entire Windows Parental Controls user interface creates a consistent user experience that seamlessly combines existing Parental Controls functionality with the new ones introduced by the third-party provider.

The Windows Control Panel Parental Controls screen still remains the central location and launching point on Windows 7 for Parental Controls functionality regardless of whether it is provided by default (system) or by a third-party provider.

2. Removal of web content restrictions and activity viewing functionality from default (system) Parental controls provider and reliance on Windows Live or third-party providers for these capabilities.

The web is changing much faster than we can update the Windows operating system. For example, when Vista was released Social Networking was barely known. Now it has a thriving web presence. We need to keep web focused parental controls up with innovation. Because of this, we have moved them into Windows Live.

Web filtering and activity viewing capabilities can be more efficiently provided by Windows Live or a third-party solution that implement web based delivery of this functionality. For instance, Microsoft’s Windows Live Family Safety free application provides web content filtering, file downloads restrictions, and activity monitoring. It also provides online contact restrictions for children using Windows Live online applications (Windows Live Hotmail, Windows Live Messenger, etc).

You can learn more about Windows Live Family Safety solution here.

More information about Windows 7 changes to the Parental Controls platform can be found here.

Windows 7 Parental Controls User Interface Changes.

Elements new to Windows 7 Parental controls top-level screen can be seen on the following screen shot:

Figure 1    Windows 7 Parental Controls screen

Figure 1 Windows 7 Parental Controls screen

  1. The Additional controls section allows users to select a provider for additional controls such as web filtering, activity reporting, online contact management, etc. When a third-party controls provider’s installed on the computer, the screen displays the Select a provider drop down box that shows the currently selected (active) provider. A description of the provider’s functionality, as supplied by the provider, is shown below the drop down.
  2. When the user account is selected by clicking user’s name or picture, the provider configuration for the user is launched. The provider can take over the default configuration UI for the in-box offline restrictions.  Optionally, provider generated status strings for user accounts are displayed under user account pictures.
  3. An Icon supplied by provider is shown in the upper right corner of the screen.

Additional control providers can still rely on the default’s (system) provider UI for the configuration of in-box offline restrictions. If a provider chooses to do so, the User Controls screen can be presented to configure a user’s Parental Controls settings.

If an additional provider is selected and configured, the following new user interface elements are shown on the Windows 7 User Controls screen:

Figure 2  Windows 7 User Controls screen. Additional controls provider is installed and configured.

Figure 2 Windows 7 User Controls screen. Additional controls provider is installed and configured.

  1. More Settings allows direct access to the currently selected provider’s functionality.
  2. Web Restrictions allows access to the currently selected provider’s functionality.

Windows Parental Controls settings and Vista to Windows 7 upgrade

If a Windows Vista PC which has parentally managed user accounts with enabled web filtering restrictions is upgraded to Windows 7, parents (administrators) are warned during the upgrade as well as when opening the Windows 7 Parental Controls screen, that web filtering and activity reporting functionality is not part of Windows 7 Parental Controls.

Figure 3  Windows 7 Parental Controls screen. Some users have web filtering restrictions. No additional provider is installed.  

Figure 3 Windows 7 Parental Controls screen. Some users have web filtering restrictions. No additional provider is installed.

Windows Vista Parental Controls settings (including web filtering and activity logs information) are preserved unchanged when upgrading from Windows Vista to Windows 7. Although web filtering settings and activity logs information are not used by Windows 7 Parental controls, their preservation allows third-party provider to honor these settings.

As you start using Windows 7, we hope these changes to Parental Controls capabilities will make you feel more confident and in control of how your family members are using computers and experiencing the web.


Leave a Comment
  • Please add 8 and 2 and type the answer here:
  • Post
  • A feature I would like to see is that ability to set a maximum amount of time that a child can use the computer. I know that I can regulate when my children can log on. But the rules in our house are simple. For example "You can use the computer an hour each day". I have written a WSH script that can log them off after an hour. But this can easily be defeated (although they have not worked it out yet :-) by logging on and off every 59 minutes! It would be nice to be able to set a maximun number of minutes an account can be logged on during 24 hours (time sent with a screensaver og locked screen subtracted). Possibly with even more granulated control, for example games can be played for an hour but browsing the net for homework (not games sites, youtube and others) can be done for more than an hour and so on

  • Don't hurry up, don't release it! You can still make it better and you know how.

    As for parental control, consider more sophisticated time control... for Win 8.

  • What about domain-joined computers? Earlier Parental controls couldn't be used for domain joined PCs. Also, it would be so much an improvement if the web-based UI of Family Safety was replaced by a rich desktop-based one, that is, if Windows Live replaced/extended the in-box UI on Windows 7 instead of a web-based one.

  • Do "Application Restrictions" use AppLocker on Windows 7?

  • I would be interested in being able to lock programs for certain times during the day.

    Say I had a public access account that but only was willing to let people use a particular program at particular times (either kids can only play game X between 4-5pm or use programs that use significant bandwidth when they won't cause problems for servers/internet speed)

  • The only problem I have with the Windows live web filter is speed. It slows down web browsing considerably compared to the Vista filter. IE 8 seems to be very responsive in the 7 RC release. If only the speed of the filter could be increased. Keep up the good work, I'm loving 7 overall!

  • This is not a specific comment on Parental Controls as I have not yet studied on this article. I will go through this and will make my comments. I just scrolled the page and got confused about the window. At first look, you cannot make out whether the pictures are from Vista or 7 based OS's. There should be something that would differentiate 7 from vista. Perhaps, you could have some text at the title bar saying Windows 7. Sorry for posting in this section.

  • Hi!

    Great work so far. As for parental control, it'll really be useful if you ask after any installation of a program if it's allow to be used by the child. Right now it's really annoying keeping up for me.

    Thanks a lot.  

  • Great work guys. But why can't the icons in the superbar just like in Mac OS X, be aligned in the middle? As usual since Windows 95 it's always aligned to the left and is not customizable. Please make it customizable. Thanks

  • Hi, great work! I'm a student computer sciences from Belgium and i've been using the beta and the rc since they came out, and i've been reading this blog also, and now with the rc, everything is running really smooth! Well done! Hopefully you could even get some more performance boosts before reaching rtm.

    But I've got a question, and it might be a lot off-topic, but about it's about MUI in windows 7:

    Will it - in the future- be possible to change the WHOLE interface to another language? Because I've changed to dutch, but there are still a few things in plain english... Not that I can't manage, but it just annoys me a little bit... The logon-screen for example still shows "Welcome" instead of "Welkom". Or in the system dialog it shows "Pen and Touch: No pen or touch is available for this display" instead of "Pen en Touch: Pen en touch is niet beschikbaar op dit scherm".

    It's not really a big deal, but it would really refine the experience of the user. That way you wouldn't have to ship multiple different localised versions either.

    I hope you would consider this, but for now I think you've all done a great job!

    Keep up the good work!


    Student Computer Sciences


  • You cannot automate good parenting.  It's better to browse together, like reading together, until you have taught a child to behave responsibly.  

    Parental controls are a bit like using the TV as an electronic babysitter.

  • I'm very disappointed when I saw that web filter is removed from parental control in windows 7 RC. I read that its replaced by family safety of windows live. I've also tried the family safety but it has disappointed me again. Because familey safety is not as good as the web filter of parental control. Its bit slower than web filter. So, why don't you keep web filtering in parental control as its useful for people who want to block some web access and also want some reporting of their children's activities..

    I'm waiting for the reply.



  • modern classic furniture


  • Say I had a public access account that but only was willing to let people use a particular program at particular times (either kids can only play game X between 4-5pm or use programs that use significant bandwidth when they won't cause problems for servers/internet speed)

  • windows 7 operating system will be a good users as the best way we in the opinion, trying to use the article, thank you

Page 1 of 3 (37 items) 123