The solution to work around this problem was to set up two Windows accounts. The work one had games etc all blocked and few time restrictions. The play account allowed much more, but the time when it could be used was controlled. Not ideal, but the best compromise that didn't involve constant adjustments.