Right. And make a visitor account for the friend (without a password which allows multiple friends to use it) but will not have administrative privilages. No admin privilage = can't touch the settings or use many of the system tools and junk and stuff.