I'd go with OpenDNS, you just change the DNS and you can allow what he can and cannot look at. It can block spyware, porn, or social networking sites.
Or you could do a keylogger, but that only tracks what he types and can send screenshots.