Well...check who's the owner of whatever he installed...change your Password and resrict his rights.
If he's still able to do that he somehow activates the build in Admin, alters his rights, installs what he needs to and changes his account back to standard user, I suspect.
-DG