Family Safe Computing & Microsoft


Posted by Nick White on Wednesday, January 17, 2007 2:03 PM 27 Comments

Hi all:  I'd like to introduce you to David George, Director of Trustworthy Computing for Windows Vista and one of the individuals responsible for the Family Safe Computing initiative.  David in this article gives an overview of the new Parental Controls and also a little insight into the philosophy behind their design.  I hope it gives you a good idea of the span of control now available in Windows Vista and helps in putting the new features to work for you.  -- Nick

As both a Microsoft employee and a parent, I am impressed with the focus on safe computing for families that Microsoft has adopted across our product platforms and services.  With the release of the consumer versions of Windows Vista, Microsoft will have parental controls tools, family settings, or content controls across all of our major platforms (Windows Vista, Xbox 360, Xbox On-Line, Windows Live/MSN, MSTV, & Zune).

In my job as a Director of Family Safe Computing, I am lucky to have the opportunity to interact and work with child safety experts, law enforcement agencies, governmental leaders, family safety software providers, parents, and many private concerns on a global basis.  Most believe that the family safe computing tools we already have released will have a very positive effect on empowering parents to manage their home computing environment based on their own family values, and will have the net effect of providing a safer computing environment  for children.

In my discussions with thousands of parents on the topic of family settings or parental controls in their home computing environment, a common theme arises in two areas: safer interactions and safer content for their children.  Much as in the real world, parents want to generally understand and know about the friends or contacts with which their children are interacting and monitor content that their children might view, interact with in a video game, or get access to through communications programs such as IM or email.  That said, a very low percentage of the parents I have spoken with like the feeling of acting as the family cop – they simply want to understand their children’s interactions online, help them navigate the opportunities that come with computing today and maintain their own personal family values in the process.  While most parents – about 80% according to studies -- have historically stated they have wanted parental controls on their home computers, actual adoption and use of these tools has hovered around the 10% - 15% range. There are many reasons why this could be the case, but it’s the lack of ease-of-use that has been the most common theme for not using the tools, even when they are already installed on the computer.

This is one of the main reasons I am excited about the release of family settings and the inclusion of parental controls with the consumer launch of Windows Vista.  Ease of use, choice and flexibility will be apparent as the parental controls will actually be resident as a part of the account set-up process.  As a parent is setting up their children’s user accounts on the computer they are asked if they would like the account to be “parentally controlled.”  If the parent says yes, they will be taken to a parental controls “hub” to apply the settings for the account.

Here’s a walk-through of how Parental Controls works in Windows Vista:

Parental Controls 1 

Once you decide to apply the controls to the account you have the option to apply many different controls to the account including:

 - Web filtering and content controls

Parental Controls 2 

Parents have the ability to set web restriction levels by high, medium, none, or custom all of which carry an explanation of the sites blocked as you click on the level.  You can also custom block by 1 of 10 categories.  It is easy to use as well as customizable to the parents needs.  Parents also have the ability to block file downloads to the computer which can cause security, performance, or licensing issues.

 - Games controls (tied into prescriptive guidance from the Entertainment Software Ratings Boards, or other global ratings boards or by single category)

Parental Controls 3 

The parent can block by the recommended levels of the rating board or custom block categories from blood and violence to nudity based on their own family needs.

 - Time of use controls that control when a managed user can access and use the computer

Parental Controls 4 

If parents want to set a block of time that their children can use the computer for gaming or homework, etc., they can schedule this hour by hour for each day of the week.

 - Auditing & monitoring

Parental Controls 5 

Parents can view the activities that their children are using the computer for from web sites visited to web sites blocked to most utilized applications.  Also important is amount of time spent on the computer if you haven’t applied the times controls so that you can manage the amount of time your children are spending on the computer.

Parents will also have control over the applications that the parentally controlled account will use, so an example would be, if a parent would like to block their child from having access to P2P programs or IM, they could block that particular account from access to these applications.

A point to mention with all these tools is that they are readily apparent to the children and young adults that might be using one of the parentally controlled accounts.  If a child goes to a website that has been blocked, they will receive a message on the screen that tells them they have been blocked from the site.  We like to say that “Overt is better than Covert” in the case of family settings so as to drive better and more frequent conversations between the parents and their children in these regards.

Another important point to mention is that Microsoft has created an open development environment that let’s partners develop on top of our own parental controls platform, creating an even more robust solution set overall for consumers.  At the consumer launch of Window’s Vista we will have four partners that are have solutions designed specifically to be ready to interact with the Windows Vista Parental Controls.  The partners will be: 

We fully expect dozens of partners in this area over the next 12-18 months with some very innovative solutions developed to help empower parents.

As education and awareness in this area is of utmost importance, Microsoft is also working with organizations globally to educate parents on how to better manage their home computing environments, protect their children in their computing endeavors, and educate themselves on how to best establish a safe computing environment for their families.  From NCMEC, I-SAFE, FCC, Child Exploitation Online Protection Agency, Chamber of Commerce, GetNetWise.com, StaySafe.org, ECPAT.org, Microsoft is working with experts globally to educate parents and provide tools to keep families safe.

This is the first time that family settings and parental controls have been available in a Microsoft operating system and I hope that parents are as excited about the availability of the tools from Microsoft as I am about working to develop and introduce them to the market.

David A. George - Director, Family Safe Computing - Microsoft

 

Posted by raskren


Poor Toby.  No BitTorrent for you!

As a parent I will be making extensive use of these features!  No longer will I have to modify permissions on games I don't want my son playing.

 

Posted by ZenAvat


Interesting read. Not exactly what I thought it would be, but interesting.

I've done a fair share of testing with parental controls, as I have a 13 yr. old nephew and 5 yr. old niece that will be getting the Home premium version of the OS when it debuts.

As far as the game controls are concerned, it's spot on. The type of games a teenager likes to play can be completely blocked from the types of games young children should be exposed to.

One of the trouble areas, I felt, was the web restrictions. It seems either all, nothing, or manually setting each and every web site on the list. This is probably due to some web standards practice not in use, but all in all it'll get the job done just with a little more aggravation than a parent should have.

Now that I have read this article, I kinda understand the approach behind the "blocked content" messages, but honestly, the type of conversation you wish to blossom aren't of the 'every minute I need to add or block a website' type, I hope. On that note, when blocking programs from susie Q or johhny Q's list, you really must take more concern in the "start up" program variety. When a program that is supposed to run at start-up on the admins account is blocked from the child's account, several error messages will display that the program could not run at startup, _every time_ the child logs in. Now, if this was a single user account without time restrictions, this wouldn't be such a nuisance, but with multiple children and multiple time slots, this type of thing could become, again, very aggravating for the parent.

Speaking of, the time slot approval is probably my most loved feature of these parental controls. I can not wait to see their reaction when they are forced to share with each other and bilaterally forced to do other things away from the computer (not in a malicious way, of course). This, alone, will certainly free the parents mind of constantly having to remind their child to do other tasks besides sitting at the computer all day/night.

I must say though, it is great to see the industry move in this direction. I firmly believe the censorship of media should be done at home, not by execs. or a lobby group. Currently, I'm not a parent, nor do I have plans to be one anytime in the future. But I'm excited to see Microsoft take a stand with regards to parent's (AND children's) Rights by providing software, nonetheless built into the OS at install, that gives them control over their content!

 

Posted by Odegaard


Sooooooo American - replacing proper parental guidance with technology (as if they don't know that blocking things only makes them more interesting).

 

Posted by bartash


Do the web site features work when the browser is firefox?

 

Posted by jtherrien


@Odegaard:

Empowering parents with tools is doing away with proper parental guidance? I think you're 100% wrong. Both can go hand-in-hand. Many parents will make great use of these features.

 

Posted by Odegaard


@jtherrien: All I can say is that I grew up in a country were censurship was rare, f-words is allowed on TV as well as sexual content, and kids can buy alcohol. I now live in the US and found that teens here swear and drink more, lots of DUI, screwing around and STDs. The bottomline: Sex, alcohol and swearing was not a problem because no one made a big deal out of it, and thus kids didn't do these things to "prove themselves".

Starting to make more censoring like this (and they even call it >family safety<??!?) only makes the kids more curious - and one thing is for sure: They will get to see whatever it is you are trying to block from them.

 

Posted by Corrine


It seems that today's children are born with a mouse in their hand.  Considering how easy it is to "click a link" or what youngsters can be exposed to due to typosquatting, I am very pleased to see the opportunities afforded parents to set age-appropriate controls.  Bravo, Microsoft!

Pingback: http://securitygarden.blogspot.com/2007/01/family-safe-computing-microsoft.html

 

Posted by someone


Really useful for any parent. Here are some suggestions:

- Rather than being called Parental Controls, MS can call them Access Controls and bundle them with Business and Enterprise versions so controlling the activities of employees of a company becomes easier. Although Group Policy and other features are meant for these things, parental controls do offer certain unique features. In fact, tis is the only Vista feature which I found was even in the Home Basic version but not in the Business/Enterprise versions.

2. If the user doesn't wanna restrict access entirely to an application but wants to control communication with only PARTICULAR PPL, like what email addresses to email / what chat contacts are permitted. Even the Windows applications (esp the ones used to communication and collaboration as well as the internet apps) must support parental controls for their various functions. IE, WLM, Windows Meeting Space, Windows Mail, Contacts and so on. Since Vista has parental control APIs, the bundled app should also use them.

3. Allow users to remotely setup parental controls.

 

Posted by dreiland


I am excited about this as well. I pay MSN premium $10 a month so I can have accounts with controls for my kids. I am hoping this gives me better control and to save $10 a month.

 

Posted by peanut77


I agree with jtherrien,

This will be a wonderful tool, something I have been waiting for for quite some time! I wonder if Odegaard has any children? I don't care if it makes me seem overprotective, and the logic of making things like alcohol, porn and curse words accepted and readily available to children so that it is less mysterious is complete nonsense. My job is to keep my kids safe, and if i am doing my job correctly i know my kids will make better choices.

 

Posted by Nick White


Hey bartash:  yes, Parental Controls will work across all browsers.

 

Posted by r3m0t


Nick White: Although the web filtering works without "co-operation" from Firefox et al (as we mentioned in a previous blog post about Parental Controls) I did notice that support for the Parental Controls API is on the list of Firefox 3.0 goals. I presume they want to replace the Vista error message with their own.

 

Posted by r3m0t


On another topic, it's nice to know that somebody from the Treacherous Computing area is working on something mildly innocent.

 

Posted by john


It is indeed a wonderful tool.

During beta testing, I subjected my 12 year-old nephew to it over the past summer, and he hated the granular control it afforded me.

What makes it better than MSN Premium - which I had used for several years, is the time controls and better reporting.

@odegaard: what country DID you live in, w/o any form of censorship? Every country censors stuff, we only decry the overt decrees.

Also, our children remain our primary concern forever. Whatever it takes to protect them should be explored, even if the effects are merely incremental.

PS. Senor Blanco, howz the bus trip so far?

 

Posted by cabbiebatman


Why not a router based standard?  If we could get some major vendors like Microsoft and Cisco (linksys)to set some standards for routers that would be branded as "child safe" it would be the best route.  Most home broadband routers can bet set to log/filter websites, protocols, restrict hours for internet access, block mac addresses .... and so on.  Parents could restrict hours for not just computers but any connected device such as an xbox.  A router based solution would make a parents life easier, only one device to configure and a child who is more tech savy than the parent could not bypass a router based solution.

 

Posted by TopgunZX


VISTA IS OUT! Go to http://www.newegg.com   and then type in on Neweggs website "Vista Home Premium"Newegg is selling it early and cheaper! I am serious....i just bought mine today along with a new PC!

 

Posted by Michael_Moor


Hey "Nick White",thx for share

---------

http://www.dl4all.com

 

Posted by GHowell


I have a problem that I cant find the answer to anywhere else: I have Live Messenger 8.1 installed and Parental Controls active for my daughter. However, under the PC Activity Viewer it says that 'There are no instant messaging events for this user." I know she's using it. I watch her chat in it.

Any suggestions?

 

Posted by Nick White


Hey GHowell:  Windows Vista monitors Internet browser activity but does not monitor Instant Messaging activity.  Windows Live OneCare Family Safety, a free Microsoft service currently in testing that will be available later this year, will monitor online instant messaging (IM) activity.  Although this functionality is not available for testing now, the team behind it hopes to add it to the test program in the months ahead.  You can join the beta test program at https://fss.live.com/.  Also consider IM Safer, another Instant Messaging management program on the market.

 

Posted by GHowell


Why do Vista's Parental Controls show Instant Messaging in the Activity Viewer then? This seems a bit misleading or to say the least not at all well documented.

 

Posted by Connected to Vista Bookmarks


BitLocker Drive Encryption A Real-world Windows Vista BitLocker Tip BitLocker Drive Encryption BitLocker

 

Posted by nia5792


This is a major security issue that would potentially allow a password changed due to it being breached back into the system again. That happened to me when, I suspected that my daughter discovered my administrator privileged password, I changed it to a new password. Later, I created a new account for my son, which never existed before. He somehow crashed the Vista OS and his account got deleted, albeit my daughters account created using the old administrator privileged password stayed intact. When I tried to log on to create a new account for my son, I was unable to log on with my new administrator privileged password. I was baffled when my repeated attempts using that new administrator privileged password that I used dozens of times refused to log me on. Then, I scratched my head in disbelief, slowly but surely it dawned on me that I should try my old administrator privileged password. Eureka!! It worked. If I had forgotten that old password I would have lost my account on that Vista.. This Vista has many bugs crawling all in it. Us poor MS guinea pigs, we are paying MS for Vista only to find bugs in their big time commercial product, we should receive some type of stipend just like the big shot developers and engineers being paid to find bugs in MS’ Vista. Una Vista Muy Malo, Mi Cabrone.

 

Posted by Yakumo


While I applaud the fact that parental controls have been installed as a default part of the OS, the implementation of the user interface is utterly mind boggling.

Having set up a vista machine for a family with a 6 year old, I think the following points should be immediately addressed for any parent/admins sanity.

1. If 'allow only programs I choose' is enabled, don't scan the entire system every time a change needs to be made! warn the user a slow scan is about to take place the first time, and let them cancel if they wish, when a scan does take place, store the dir list of results to speed things up on subsequent use, and have a 'rescan' button available if the user knows things have changed.

2. related but important enough for it's own point, you should be able to manually add a single, or group of applications with a standard file browser dialogue at any time, not having to sit through an excruciating full system scan for several minutes every time, when you know you just want to approve the one application you have just installed for your child.

3. If an application has been added to the approved games list, then it should automatically (or at least on the same options page give the choice) be added to the approved programs to run, if allow only programs I approve is enabled. it is counter intuitive to have to make approvals twice (and very annoying to have to sit through a system scan once again)

4 . If a game doesn't have it's own ratings, offer a system for the admin/parent to add them themselves.

5. Irrespective of point 4, the 'Block or Allow specific games' option should list ALL games (or applications) that have been added to the games folder by the user or admin, not only the ones vista recognises as games.

6. If an application has been blocked, it may well be too slow to check all desktop and start menu links for approval, and damage the user experience. But the least that can be done is if a game has been blocked for a user, then do NOT show that game in the games menu for that user, ever, it only causes confrontation.

These seem to be really quite major oversights to me, and show the system was unlikely tested with enough thought in any real situation (eg large full and/or slow hard  drive, many applications, many modifications to the whitelists being made).

All the functionality is clearly there, it just needs a rapid UI rewrite with a little more thought for the poor parents (or even hardened techs) who have to actually administer the system.

I can dream for SP1, but a little updated .CPL wouldn't be hard to push on MS Update :)

 

Posted by Kanga


As mother of the aforementioned 6 year old, I don't 'like the feeling of acting as the family cop' either, but I believe "Covert is better than Overt" to be more appropriate in our household.

The restrictions being so apparent take that element of "Parental Control" away as the option of how, when, and how often those conversations take place should be left for the parent to "drive" - not Microsoft :)

 

Posted by lotontech


Hey Nick,

I think it is appropriate here to tell you about my book / download PDF "Safe Family Computing with Windows Vista" at http://www.lulu.com/content/1383821.

I hope you don't take this to be promotional spam, that's not the intention. Please us the link as you see fit for the benefit of your blog readers.

 

Posted by rad


Below is an idea for you to take advantage off:

How about making a central database to hold users blocked sites, which will be populated by users and your company (This is optional for more competition).

Your program will offer the users 2 options, 1) the users can share their blocked sites to help other parents block bad sites (Especially sites that has videos, and images.  Your program does not block them all).  This option will sync the blocked sites with your specified database.  2) This option will keep your program as it is now (No sharing or sync of block sites with your database).

Your benefit out of this new feature will be very rewarding as you build a huge database for you to use.  The second benefit is the high power which will be added to your program and the reward to your Company.  The third benefit is your program will have huge advertisement for its extra feature, and will make parents help each other and build free advertisements between families.  The forth benefit is a costumer loalty.

If you need any more information, please email me at: Radshaykho@msn.com

Rad Shaykho

425 830 0915

Just incase:  

I am not asking for any return or anything, unless you offer it.  Feel free to use it for free.

Rad Shaykho

 

Posted by here2help


I still find the Vista Parental Controls to not fill all of the needs on my computer to stop my children from getting to these sites. If anyone is interested You should look at sentry parental controls. It helped me with monitoring and blocking my kids and was very easy to use. It runs without interfering with any of the other vista programs once it's installed and it runs in stealth mode so that my kids don;t know that it is running on their computer. It really helped me out so if any parents are interested they should look at it too: http://www.sentryparentalcontrols.com

Anonymous comments are disabled
© Copyright 2007 Microsoft Corporation. All rights reserved.