Can all the protected PCs activate new services or is there an "administrator" installation? I don't want my kids activating new services without my knowledge.