Did you password protect the main (and only?) administrator account on your PC? I'd log in as the main administrator and make sure that you've not got any other users that have admin level permissions that he is able to access.
Another option would be to password protect your system at the BIOS level, that would keep him out

.